CVE-2019-10267: Ahsay Cloud Backup Suite

High severity, CVSS 8.8. EPSS: 75.2% chance of exploitation in the next 30 days.

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the configured user (e.g., Administrator).

Affected products

• Ahsay Cloud Backup Suite: from 7.7.0.0, before 8.1.1.50 (fixed in 8.1.1.50)

Published 2019-07-26. Last modified 2026-06-17.