Ahsay released hotfixes on October 12, 2026, to patch two vulnerabilities in AhsayCBS that attackers chained to achieve remote code execution on backup servers.
Threat actors are actively exploiting two authentication bypass vulnerabilities in AhsayCBS backup software to install malicious software on compromised systems.