CISA adds BeyondTrust Remote Support CVE-2026-102764 to KEV
Original title: CISA KEV: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability — BeyondTrust Remote Support (CVE-2026-102764)
Weak message-origin checks can allow file operations on the appliance; the federal due date is October 19, 2026.
CISA added CVE-2026-102764, described as an authentication bypass by spoofing in BeyondTrust Remote Support, to the Known Exploited Vulnerabilities catalog. Internal components did not adequately validate the origin of received messages. Under the right conditions, an attacker could perform file operations on the appliance. Stakeholders must apply vendor mitigations under BOD 26-04 by October 19, 2026, or stop using the product if mitigations are unavailable.
Unconfirmed: The entry does not state affected versions, and ransomware use is unknown.
- The entry names no affected or fixed versions.
- Known ransomware campaign use is listed as unknown.
- Cloud services must follow applicable BOD 26-04 guidance.
Impact: Attacker can perform file operations on the appliance
| Product | Affected |
|---|---|
| BeyondTrust Remote Support | — |
- 1.Apply vendor mitigations in line with CISA BOD 26-04 by October 19, 2026.
- 2.Follow CISA forensics triage requirements cited in the KEV entry.
- 3.Discontinue use if mitigations are unavailable.
- CVEs
- CVE-2026-102764
- Vendors
- BeyondTrust
- Products
- Remote Support
- Organizations
- CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-102764 | Message-origin spoofing enables file ops on BeyondTrust Remote Support | 9.3 | 19% | KEVPoC ×2 | KEV |
From the original article
1 min read at cisa.govThe vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.