CVE-2026-102764: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
Published Oct 15, 2026
·Updated
BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.
Other sources
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
— MITRE
Affected Software
3 affected components
BeyondTrust Remote Support
BeyondTrust Remote Support
BeyondTrust Remote Support<=26.2.3
Event History
Oct 15, 2026
CVE Published
via MITRE·08:30 PM
Data Sourced
via MITRE·08:30 PM
DescriptionWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeaknessAffected Software
Oct 16, 2026
Data Sourced
via CISA·12:00 AM
RemedyDescriptionWeaknessAffected Software