Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-102764: BeyondTrust Remote Support lets attacker bypass login to access files
CVE-2026-102764 · published 3 days ago · actively exploited
Summary
The Remote Support appliance can be tricked into thinking a user is authenticated, allowing a remote attacker to bypass the login step. Once inside, the attacker could read, modify, or delete files on the system. Apply the vendor's security update or patch as soon as possible and verify that only trusted network users can reach the appliance.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| beyondtrust | remote support | <= 26.2.3 |
| beyondtrust | remote_support |
<= 26.2.3 cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:* |
Original advisory text
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.
Internet-facing
3 days
and check for signs of compromise
Internal
3 days
and check for signs of compromise
- Known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
1%
chance of attack within 30 days
Type
CWE-290Authentication Bypass by Spoofing
Timeline
Published15 Oct 2026
Updated17 Oct 2026
First seen15 Oct 2026
Track software like this
Free during beta