CVE-2026-102764

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

CVSS 4.0

9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2026-10-16, due 2026-10-19

CWE

CWE-290

Published

2026-10-15

Modified

2026-10-17

Record from

the NVD, synced 2026-10-19

Affected

• beyondtrust:remote_support

References

• https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066
• https://nvd.nist.gov/vuln/detail/CVE-2026-102764
• https://www.beyondtrust.com/blog/entry/bt26-05
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102764

Check your stackJSON