Announcements

We are pleased to announce the official release of Ahsay v9.17.0 with the following updates:

1. Ahsay Security Patchset for CVE-2026-105133 and CVE-2026-105134
2. Ahsay Security Patchset Q4/2026
3. Enhanced authentication and session management
4. Enhanced authentication system to improve security
5. Disabled remote API access by default
6. Disabled the JSP engine to prevent execution of malicious JSP files
7. Removed usage of access tokens

Click here to view the full release notes.

We are pleased to announce the official release of Ahsay v10.3.6.1 which now supports:

1. AhsayCBS security hardening updates
2. Enhance CBS authentication system to improve security
3. Embed CBS URL in Synology installer to streamline installation
4. MySQL 26
5. Windows 11 26H2
6. Synology DSM 7.4

Click here to view the full release notes.

As part of our ongoing commitment to enhancing the security and resilience of Ahsay solutions, we are pleased to announce the release of AhsayCBS v9.15.2.78 hotfix. This update includes significant security hardening enhancements designed to further strengthen the platform's security posture.

We strongly recommend that all partners take immediate action to apply the latest hotfix and ensure their AhsayCBS environments remain adequately protected.

AhsayCBS v9 hotfix

All partners running affected v7, v8 and v9 versions should upgrade to the latest AhsayCBS v9.15.2.78 official hotfix, available at: https://www.ahsay.com/en/hotfix-v9-partner-only (A valid Partner Portal login is required).

Alternatively, partners who prefer not to deploy the hotfix separately may wait for the upcoming AhsayCBS v9.17.0 release, which is scheduled within the next two weeks. These security enhancements will be incorporated into the official installer and available as part of the standard release.

AhsayCBS v10 hotfix update

We have also released a minor update to our v10 official hotfix to address an issue affecting license key updates in the AhsayCBS web console.

The latest v10 official hotfix version is v10.3.4.55, which is available at: https://www.ahsay.com/en/hotfix-v10-partner-only (A valid Partner Portal login is required).

As part of our ongoing commitment to enhancing the security and resilience of Ahsay solutions, we are pleased to announce the release of AhsayCBS v10.3.5.54 hotfix. This update includes significant security hardening enhancements designed to further strengthen the platform's security posture.

We strongly recommend that all partners take immediate action to apply the latest hotfix and ensure their AhsayCBS environments remain adequately protected.

Alternatively, partners who prefer not to deploy the hotfix separately may wait for the upcoming AhsayCBS v10.3.6 release, which is scheduled for next week. These security enhancements will be incorporated into the official installer and available as part of the standard release.

All partners running affected v8, v9, or v10 versions should upgrade to the latest AhsayCBS v10.3.4.54 official hotfix, available at: https://www.ahsay.com/en/hotfix-v10-partner-only

For partners who need to continue using AhsayCBS v8 or v9 due to operating system compatibility limitations, a separate official AhsayCBS v9 hotfix is expected to be available early next week.

On 9 October, 2026, we began receiving reports from partners regarding unauthorized access incidents affecting their AhsayCBS servers. From the moment the issue was identified, our team acted with urgency and focus.

• A hotfix was developed and released within 24 hours to immediately close the backdoor to prevent further exploitation.
• Partners were notified immediately and provided with guidance.

Our priority was, and continues to be, protecting our partners, and their customers.

Our short-term commitment: Complete resolution

Any newly discovered issues arising from the remediation process will be addressed as quickly as possible. We will not consider this matter closed until all identified concerns have been addressed and our partners have the confidence they need to continue serving their customers.

Our long-term commitment: Stronger security for the future

As the threat landscape continues to evolve, cybercriminals are increasingly employing AI-powered techniques to accelerate and enhance the exploitation of vulnerabilities. This is a challenge faced by software vendors across all industries, and this incident reflects that broader reality rather than an issue unique to Ahsay.

To further enhance our security posture, additional safeguards for both version 9 and 10 are already planned and will be rolled out as part of our continuous security improvement strategy. These enhancements are designed to strengthen resilience of Ahsay solutions against emerging cyber threats, including increasingly sophisticated AI-powered attacks.

Moving forward together

We always stand with our partners.

Challenges such as these serve as an important reminder that cybersecurity requires constant vigilance. By responding swiftly, learning continuously, and investing in stronger defenses, we can further strengthen our resilience and emerge even better prepared for the future.

Thank you for your continued trust, partnership, and support.

Together, we will continue to grow with greater confidence, stronger security, and a shared commitment to protecting the businesses and customers who rely on us every day.