Skip to main content

AhsayCBS (DIY) v10.3.6 Release Notes (02-Nov-2026)

Limitation / Known Issue of This Version

Deployment / Upgrade

  • For multi-domain SSL certificates added to CBS before v7.17.0.30, users are required to re-add the SSL certificates to CBS v7.17.0.30 or above, before the certificates can be used on sub-admins accounts.

Note

  • Besides the availability of re-branding option, the license key must have valid maintenance in order to build any v10 branded AhsayCBS/OBM/ACB installer.

This release contains the major features listed below:

Enhancements

API

  • Limit UpdateBackupSet.do effective scope

Application-specific Backup/Restore - Proxmox VE

  • Support for Proxmox 9.2

Backup Destination

  • Add Feature to Change Access Key for Predefined Cloud Destination

Security

  • Disabled remote API access by default
  • Disabled the JSP engine to prevent execution of malicious JSP files
  • Enhanced Authentication system to improve security
  • Removed usage of access token
  • Enhanced Authentication and Session Management
  • Ahsay Security Patchset for CVE-2026-105133 and CVE-2026-105134
  • Ahsay Security Patchset Q4/2026

Bug Fixes

API

  • UpdateSchedule.do is returning Error - For input string: "PM", java.lang.NumberFormatException
  • GetBackupJobReport result is empty
  • Error "[API:GetBuildingStatus] java.io.IOException: [Error] Parameter SysUser is null!"

General / Miscellaneous

  • OBM/ACB clients cannot connect to CBS after upgrade
  • Data Migration Not Completed Error During DIC and Space Freeing Up
  • Folder missing from Backup source list UI
  • Restore Drill job stuck with "Pending for encrypt key"
  • License Update Fails – Reverts to Previous License or Gets Stuck When Saving
  • Failed to set backup user profile to server "Client host quota exceeded"
  • Encryption Settings Not Applied in SynologyOBM "Add New Backup Wizard" when view disabled in GUI Settings
  • Deleted Source Files Cannot Be Deselected from CBS Web Console
  • Let's Encrypt SSL not auto renewing
  • Cannot restore via AhsayCBS console for backupsets created in v6

Backup Destination

  • Backup to S3 Storage Destination gets error "failed in delete file, path: %.BAK%, HTTP Code: 400 [IncompleteBody], You did not provide the number of bytes specified by the Content-Length HTTP header"
  • Error encountered ""Cannot invoke "com.ahsay.cbs.obs.access.user.backupSet.EditBackupSetBean.getDestinations()" because "local7" is null" when editing the predefined destination"

Application-specific Backup/Restore - Microsoft 365

  • Files/items inside the folder of OneDrive backup are not visible in Restore List
  • Failed to create backupset with Microsoft Account (register with existing Email)
  • Restoring M365 OneDrive data to an alternate location gets stuck
  • Backup gets error "Failed to parse date time. DateTime= 2021-03-11T09:00:00.0000000Z, TimeZone=tzone://Microsoft/Utcrn"
  • Backup gets error "Insufficient privileges to complete the operation"
  • Backup gets error "java.lang.UnsupportedOperationException: [OutlookManager.getInputStream] Not supported for business account"
  • Backup gets error ""The provided grant has expired due to it being revoked, a fresh auth token is needed" even after re-authenticating the backupset
  • Backup gets error "Failed to handle same file, sPath=%path% Reason=java.lang.RuntimeException: [FileAttributeIterator.reiterate] Failed to list sPath"
  • Backup gets error "Failed to list sPath='Inbox'. Reason='java.lang.RuntimeException: [MailService.listMessages] Failed. Expected a ',' or '}' at 679573"
  • Backup gets error "File cannot use SharedBlockOutputStream"
  • Backup gets error "HTTP 414 "Request URL Too Long" for Specific Mailbox
  • Backup gets error "String value length (220266496) exceeds the maximum allowed (220200960)""
  • Backup gets error "Failed to handle same file %Path%. Reason=504 UnknownError"
  • Backup Sharepoint gets error "Fail to reload %path% eason=#ERR com.ids.share.bp: #ERR 400 Bad Request"
  • Backup stuck and generate high disk I/O and memory usage
  • Backupset is on the loop during authentication
  • Backupset creation shows error "Parameter SysUser is null!"
  • Restore gets error "[Error] Parameter SysUser is null!"
  • Error "FastPipedOutputStream has been closed by the reading thread. Message='Failed to get OutputStream of file" when restoring Calendar to original location
  • Chat messages are not restored via Quick Download (HTML)
  • "Insufficient privileges to complete the operation." error is hit when restoring to alternate login account
  • Public Folder Restore Options Are Inconsistent Between AhsayCBS and AhsayOBM
  • Resolved Backup and Restore Performance issue

Application-specific Backup/Restore - Google Workspace

  • Resolved Backup Performance issue
  • New Google Meet recordings are skipped for Meet during backup

Application-specific Backup/Restore - Proxmox VE

  • Restore Job is not starting

Redirctor

  • Redirector gets "Access Denied" error and "Incorrect system username/password"

Security

  • IpCheckingFilter keys its abuse blocklist on a client-controlled header (Util.getRemoteAddr resolveProxy=true)

Product Abbreviations:

  • AhsayACB - ACB
  • AhsayOBM - OBM
  • AhsayOBR - OBR
  • AhsayCBS - CBS
  • AhsayMobile - MOB
  • Mobile Backup Server (AhsayMobile) - MBS