SB2026101627 - Remote code execution in BeyondTrust Remote Support

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026101627

SB2026101627 - Remote code execution in BeyondTrust Remote Support

Published: October 16, 2026

Security Bulletin ID SB2026101627
CSH Severity
Critical
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Authentication Bypass by Spoofing (CVE-ID: CVE-2026-102764) Exploited

CWE-ID: CWE-290 - Authentication Bypass by Spoofing

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to perform unauthorized file operations on an affected BeyondTrust Remote Support appliance.

The vulnerability exists due to improper validation of message origins in the internal messaging components of BeyondTrust Remote Support when processing incoming messages. A remote attacker can spoof the origin of messages to perform unauthorized file operations on the appliance.

Note, the vulnerability is being actively exploited in the wild.


Remediation

Install update from vendor's website.

References