AhsayCBS (DIY) v10.3.6 Release Notes (02-Nov-2026)
Limitation / Known Issue of This Version
Deployment / Upgrade
- For multi-domain SSL certificates added to CBS before v7.17.0.30, users are required to re-add the SSL certificates to CBS v7.17.0.30 or above, before the certificates can be used on sub-admins accounts.
Note
- Besides the availability of re-branding option, the license key must have valid maintenance in order to build any v10 branded AhsayCBS/OBM/ACB installer.
This release contains the major features listed below:
Enhancements
API
- Limit UpdateBackupSet.do effective scope
Application-specific Backup/Restore - Proxmox VE
- Support for Proxmox 9.2
Backup Destination
- Add Feature to Change Access Key for Predefined Cloud Destination
Security
- Disabled remote API access by default
- Disabled the JSP engine to prevent execution of malicious JSP files
- Enhanced Authentication system to improve security
- Removed usage of access token
- Enhanced Authentication and Session Management
- Ahsay Security Patchset for CVE-2026-105133 and CVE-2026-105134
- Ahsay Security Patchset Q4/2026
Bug Fixes
API
- UpdateSchedule.do is returning Error - For input string: "PM", java.lang.NumberFormatException
- GetBackupJobReport result is empty
- Error "[API:GetBuildingStatus] java.io.IOException: [Error] Parameter SysUser is null!"
General / Miscellaneous
- OBM/ACB clients cannot connect to CBS after upgrade
- Data Migration Not Completed Error During DIC and Space Freeing Up
- Folder missing from Backup source list UI
- Restore Drill job stuck with "Pending for encrypt key"
- License Update Fails – Reverts to Previous License or Gets Stuck When Saving
- Failed to set backup user profile to server "Client host quota exceeded"
- Encryption Settings Not Applied in SynologyOBM "Add New Backup Wizard" when view disabled in GUI Settings
- Deleted Source Files Cannot Be Deselected from CBS Web Console
- Let's Encrypt SSL not auto renewing
- Cannot restore via AhsayCBS console for backupsets created in v6
Backup Destination
- Backup to S3 Storage Destination gets error "failed in delete file, path: %.BAK%, HTTP Code: 400 [IncompleteBody], You did not provide the number of bytes specified by the Content-Length HTTP header"
- Error encountered ""Cannot invoke "com.ahsay.cbs.obs.access.user.backupSet.EditBackupSetBean.getDestinations()" because "local7" is null" when editing the predefined destination"
Application-specific Backup/Restore - Microsoft 365
- Files/items inside the folder of OneDrive backup are not visible in Restore List
- Failed to create backupset with Microsoft Account (register with existing Email)
- Restoring M365 OneDrive data to an alternate location gets stuck
- Backup gets error "Failed to parse date time. DateTime= 2021-03-11T09:00:00.0000000Z, TimeZone=tzone://Microsoft/Utcrn"
- Backup gets error "Insufficient privileges to complete the operation"
- Backup gets error "java.lang.UnsupportedOperationException: [OutlookManager.getInputStream] Not supported for business account"
- Backup gets error ""The provided grant has expired due to it being revoked, a fresh auth token is needed" even after re-authenticating the backupset
- Backup gets error "Failed to handle same file, sPath=%path% Reason=java.lang.RuntimeException: [FileAttributeIterator.reiterate] Failed to list sPath"
- Backup gets error "Failed to list sPath='Inbox'. Reason='java.lang.RuntimeException: [MailService.listMessages] Failed. Expected a ',' or '}' at 679573"
- Backup gets error "File cannot use SharedBlockOutputStream"
- Backup gets error "HTTP 414 "Request URL Too Long" for Specific Mailbox
- Backup gets error "String value length (220266496) exceeds the maximum allowed (220200960)""
- Backup gets error "Failed to handle same file %Path%. Reason=504 UnknownError"
- Backup Sharepoint gets error "Fail to reload %path% eason=#ERR com.ids.share.bp: #ERR 400 Bad Request"
- Backup stuck and generate high disk I/O and memory usage
- Backupset is on the loop during authentication
- Backupset creation shows error "Parameter SysUser is null!"
- Restore gets error "[Error] Parameter SysUser is null!"
- Error "FastPipedOutputStream has been closed by the reading thread. Message='Failed to get OutputStream of file" when restoring Calendar to original location
- Chat messages are not restored via Quick Download (HTML)
- "Insufficient privileges to complete the operation." error is hit when restoring to alternate login account
- Public Folder Restore Options Are Inconsistent Between AhsayCBS and AhsayOBM
- Resolved Backup and Restore Performance issue
Application-specific Backup/Restore - Google Workspace
- Resolved Backup Performance issue
- New Google Meet recordings are skipped for Meet during backup
Application-specific Backup/Restore - Proxmox VE
- Restore Job is not starting
Redirctor
- Redirector gets "Access Denied" error and "Incorrect system username/password"
Security
- IpCheckingFilter keys its abuse blocklist on a client-controlled header (Util.getRemoteAddr resolveProxy=true)
Product Abbreviations:
- AhsayACB - ACB
- AhsayOBM - OBM
- AhsayOBR - OBR
- AhsayCBS - CBS
- AhsayMobile - MOB
- Mobile Backup Server (AhsayMobile) - MBS