- Description
- The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
- Source
- 13061848-ea10-403d-bd75-c83a022c2891
- NVD status
- Analyzed
- Products
- remote_support
CVSS 4.0
- Type
- Secondary
- Base score
- 9.3
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- CRITICAL
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
Data from CISA
- Vulnerability name
- BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
- Exploit added on
- Oct 16, 2026
- Exploit action due
- Oct 19, 2026
- Required action
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- 13061848-ea10-403d-bd75-c83a022c2891
- CWE-290
- Hype score
- Not currently trending
【CISA KEV速報】2026-10-16付けで2件追加 ・CVE-2025-61624 Fortinet Multiple Products ・CVE-2026-102764 BeyondTrust Remote Support いずれも悪用確認済み。概要と対応期限はこちら https://t.co/zSuvR5oZrG
@sec_news_com
16 Oct 2026
20 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 UPDATE: CISA ADDS BEYONDTRUST CVE-2026-102764 AND FORTINET CVE-2025-61624 TO KEV, DUE OCT 19 CISA added two exploited edge-device flaws to its Known Exploited Vulnerabilities catalog on Oct 16, 2026, both with a short federal remediation due date of Oct 19 and both flagged
@DailyDarkWeb
16 Oct 2026
2711 Impressions
1 Retweet
5 Likes
0 Bookmarks
2 Replies
0 Quotes
🔴 Actively exploited: Attackers exploit a critical BeyondTrust Remote Support flaw that allows file manipulation on the appliance CVE-2026-102764 A critical vulnerability in BeyondTrust Remote Support, CVE-2026-102764 (CVSS… #CVE #BeyondTrust #infosec https://t.co/aMTkdcVG
@Orbitaley
16 Oct 2026
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚽NEWS 1. BeyondTrust Zero-Day explorado por grupo chinês (Armory Castle) China-linked hackers (Armory Castle/UNC5221) exploraram zero-day no BeyondTrust Remote Support (CVE-2026-102764) desde agosto. Permite operações de arquivo em appliances e deploy de malware (SAWFLY +
@Gnucypher
16 Oct 2026
70 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
🛡️ CYBER BULLETIN | 2026/10/16 🚨 Four stories worth your coffee this Friday. 1) BeyondTrust patched CVE-2026-102764 (CVSS 9.3) in Remote Support, and Mandiant says a China-linked group called Armory Castle (formerly UNC5221) used it as a zero-day back in late August. No
@FrontieraTechIT
16 Oct 2026
16 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Unpatched vulnerabilities don't stay hidden on our atlas. #CVE CRITICAL VULNERABILITY DETECTED CVE ID: CVE-2026-102764 Vendor: Unknown Severity: Critical — CVSS 9.3 Product: Unknown Date: 2026-10-15 A critical vulnerability (Authentication Bypass by Spoofing) has been
@ThreatAtlas
15 Oct 2026
78 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A0D7C73F-5086-40AA-B153-B086CFCA79A5",
"versionEndIncluding": "26.2.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]