Vulnerability Intelligence Report
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
CVE-2026-102764
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
CISA KEV
Nuclei Template
SSVC: Active Exploitation
Automatable
CVSS Base Score
9.3
CRITICAL
EPSS Probability:0.60%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-290 ↗CWE-290 Authentication bypass by spoofing
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| BeyondTrust | Remote Support | 0 <= 26.2.3 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
CISA KEV
ACTIVE IN CATALOG
Nuclei Template
SCANNER AVAILABLE
EPSS Score
0.601%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | BeyondTrust Inc. · Vendor · USA |
| Reserved | 2026-09-29T16:29:20 |
| Published | 2026-10-15T20:30:32 |
| Last Updated | 2026-10-17T03:55:27 |
Community Chatter & Buzz