Vulnerability Intelligence Report
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
CVE-2026-102764
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
No Active Exploit Signals
CVSS Base Score
9.3
CRITICAL
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-290 ↗CWE-290 Authentication bypass by spoofing
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| BeyondTrust | Remote Support | 0 <= 26.2.3 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | BeyondTrust Inc. · Vendor · USA |
| Reserved | 2026-09-29T16:29:20 |
| Published | 2026-10-15T20:30:32 |
| Last Updated | 2026-10-15T20:30:32 |
Community Chatter & Buzz