CVE-2026-102764
9.8CriticalPublished 15 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-290
Impact
Unauthenticated remote attackers can perform unauthorized file operations directly on the appliance. They only need network access to the vulnerable Remote Support service to send spoofed messages.
Root cause
Internal service components fail to adequately authenticate and validate the origin of incoming messages.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade BeyondTrust Remote Support appliances to the patched release referenced in vendor advisory KB0024066 / BT26-05. If patching immediately is not possible, restrict network access to the appliance management and internal communication ports to trusted IP addresses.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
References
- https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066Permissions Required
- https://nvd.nist.gov/vuln/detail/CVE-2026-102764US Government Resource
- https://www.beyondtrust.com/blog/entry/bt26-05Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102764US Government Resource