Remote Support Vulnerability in BeyondTrust's Messaging Components
CVE-2026-102764

9.3CRITICAL

Key Information:

Vendor

Beyondtrust

Status
Remote Support
Vendor
CVE Published:
15 October 2026

What is CVE-2026-102764?

A vulnerability exists in the internal messaging components of BeyondTrust's Remote Support product, where the system fails to properly validate the origin of received messages. This oversight may allow an attacker to execute unauthorized file operations on the appliance, exposing sensitive data and potentially compromising system integrity. Proper input validation is crucial to mitigate such risks and ensure the security of the application's operation.

Affected Version(s)

Remote Support 0 <= 26.2.3

References

https://nvd.nist.gov/vuln/detail/CVE-2026-102764
https://www.beyondtrust.com/blog/entry/bt26-05
https://beyondtrustcorp.service-now.com/csm?id=csm_kb_art...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.