by Kastro
Paper/Archive/CVE-2026-102764

CVE-2026-102764

BeyondTrust Remote Support — Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

KEV · due 19 OctEPSS 19%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (NVD)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 97.3.973 × 2019.5Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

Affected

ProductAffectedFixed inSource
Remote Support≤ 26.2.3–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
BT (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-102764refbeyondtrust.com/blog/entry/bt26-05refbeyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102764kevcisa.gov/known-exploited-vulnerabilities-catalog