Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

BeyondTrust Remote Support may let attackers modify files

CVE-2026-102764 · published today
Summary

The internal parts of BeyondTrust Remote Support do not properly check where messages come from. This weakness could let a bad actor tell the system to create, change, or delete files on the appliance. Apply the latest security update from BeyondTrust as soon as possible to fix the issue.

Original advisory text
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right condi...
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Type
CWE-290Authentication Bypass by Spoofing
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CVE-2026-102764 · NVD
Track software like this
Free during beta