What’s Vulnerable › Vulnerabilities
CVE-2026-102764: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2026-10-16
- EPSS: 20.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-15 · updated 2026-10-17
- Weakness: CWE-290
Description
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
Affected products
- BeyondTrust Remote Support: through 26.2.3
In the news
References
- https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066
- https://nvd.nist.gov/vuln/detail/CVE-2026-102764
- https://www.beyondtrust.com/blog/entry/bt26-05
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102764
Get alerted when CVE-2026-102764 or the next vulnerability affects your stack