Login Request a demo
CB
Product
Cloud Backup Suite
by Ahsay · last CVE Oct 4, 2026
On CISA KEVExploited in the wild
9
CVEs
2
On KEV
10.0
Max CVSS
2
New 30D
Vulnerabilities9In the news5Timeline
Severity mix
Critical 1High 7Medium 1Low 0
Severity
All severities9Critical1High7Medium1Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Cloud Backup Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105134
In wildKEV
10.0
82%
Oct 4
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
Affected: before 9.15.2.70; 10.1.0 before 10.3.4.45
CVE-2026-105133
In wildKEV
7.3
79%
Oct 4
Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
Affected: before 9.15.2.70; 10.1.0 before 10.3.4.45
CVE-2020-5846
8.8
1%
Jan 6
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in…
Affected: 8.3.0.30
CVE-2019-10267
8.8
75%
Jul 26
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50
Affected: 7.7.0.0 before 8.1.1.50
CVE-2019-10266
7.5
13%
Jul 26
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50
Affected: 7.7.0.0 before 8.1.1.50
CVE-2019-10265
7.5
3%
Jul 26
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50
Affected: before 8.1.1.50
CVE-2022-37027
7.2
22%
Sep 21
Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options
Affected: 9.1.4.0
CVE-2019-10264
7.2
1%
Jul 26
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50
Affected: before 8.1.1.50
CVE-2019-10263
6.1
1%
Jul 26
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50
Affected: before 8.1.1.50
Showing 9