15 October 2026
Reference: CVE-2026-105134
1. What is being reported?
A vulnerability in AhsayCBS backup software allows attackers to run harmful commands on the system by manipulating a specific part of the software remotely. This means someone could potentially access or damage your data without permission.
2. What this means in plain English
If your organisation uses this backup software, hackers might be able to break in and cause serious damage, such as stealing data or disrupting your backups. This risk is urgent because the flaw is already being exploited in the wild.
3. Could this affect a small business?
Small businesses or charities using AhsayCBS backup software versions up to 10.3.2 could be affected. If you do not use this software, or use a newer version, you are likely not at risk.
4. What to do now
- Check if your organisation uses AhsayCBS backup software and identify the version.
- If using version 10.3.2 or earlier, arrange to upgrade to version 10.3.4 immediately.
- Consult your IT provider to confirm the upgrade is applied correctly and that no signs of compromise exist.
- If you use cloud services with this software, follow any additional guidance from your provider or consider discontinuing use until patched.
5. Ask your IT provider
Can you confirm if our AhsayCBS backup software is up to date and patched against the known command injection vulnerability CVE-2026-105134?
6. Bottom line
If you use AhsayCBS backup software, update it now to protect your organisation from active cyberattacks.
Information based on CISA KEV, NVD and reputable security reporting.