Unauthenticated Remote Authentication Bypass By Spoofing in BeyondTrust Remote Support Rates 9.3 CVSS
Last refreshed2026-10-15
Status: UPDATED
| Advisory ID: CVE-2026-102764
Key Details
CVE
CVE-2026-102764
CVSS Score / Version
9.3 (Critical) / CVSS v4.0
Updated
2026-10-15
Affected products
BeyondTrust Remote Support
Classified as
CWE-290 (Authentication Bypass by Spoofing)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
BeyondTrust
Remote Support
Subsystems
OT Remote Access & Privileged Operations
Sectors
Multiple
What to Know
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance. (NVD)
What to Do
Monitor BeyondTrust's web page for any future patch releases.