11 October 2026
Reference: CVE-2026-105133
1. What is being reported?
The report describes a vulnerability in AhsayCBS backup software versions up to 10.3.2. Attackers can manipulate a specific part of the software’s login process to gain access without proper authentication. This can be done remotely, meaning hackers do not need physical access. The issue is fixed in version 10.3.4.
2. What this means in plain English
If your organisation uses this backup software and has not updated it, hackers could break in and install harmful software. This could disrupt your backups, steal data, or use your systems for other attacks. Because the exploit is public and actively used, the risk is real.
3. Could this affect a small business?
Small businesses or charities using AhsayCBS backup software on versions before 10.3.4 are at risk. Organisations not using this software are not affected. If you are unsure whether you use AhsayCBS, check with your IT provider.
4. What to do now
- Check if your organisation uses AhsayCBS backup software and note the version number.
- If using a version before 10.3.4, arrange to upgrade to version 10.3.4 or later as soon as possible.
- Ask your IT provider to confirm that the software is updated and that no unauthorised access has occurred.
- Review your backup and security procedures to ensure they are working correctly.
5. Ask your IT provider
Can you confirm if we use AhsayCBS backup software, and if so, is it updated to version 10.3.4 or later to protect against the recent authentication bypass vulnerability?
6. Bottom line
Keep backup software up to date to prevent hackers from exploiting known weaknesses and protect your data.
Information based on CISA KEV, NVD, and reputable security news reports.