CVE-2019-10264: Ahsay Cloud Backup Suite

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the "Move / Import / Export Users" screen has an Import Users option. This option accepts a ZIP archive containing a users.xml file that can trigger XXE.

Affected products

• Ahsay Cloud Backup Suite: before 8.1.1.50 (fixed in 8.1.1.50)

Published 2019-07-26. Last modified 2026-06-17.