CVE-2026-102764

Analyzed Analyzed - Analysis Complete

BeyondTrust Remote Support File Operation Vulnerability

Publication date: 2026-10-15

Last updated on: 2026-10-17

Assigner: BeyondTrust

Description

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-15

Last Modified

2026-10-17

Generated

2026-10-19

AI Q&A

2026-10-16

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102764

Affected Vendors & Products

Vendor	Product	Version / Range
beyondtrust	remote_support	to 26.2.3 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-290	This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

Executive Summary

This vulnerability is in BeyondTrust’s Remote Support product. The internal components did not properly check where messages came from, which could let an attacker perform unauthorized file operations on the appliance.

Detection Guidance

This vulnerability involves inadequate message origin validation in BeyondTrust Remote Support, potentially allowing unauthorized file operations. Detection requires inspecting network traffic and system logs for suspicious file operations originating from unexpected sources. Check for unauthorized file writes or modifications on the appliance and monitor network connections to the Remote Support components.

Impact Analysis

An attacker could exploit this to manipulate files on the affected appliance, potentially leading to data theft, system disruption, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized file access or data breaches, which may violate compliance requirements such as GDPR or HIPAA due to improper data handling or exposure.

Mitigation Strategies

Apply the latest security patches or updates provided by BeyondTrust for the Remote Support product to address the message origin validation issue.

Hi! I’m here to help you understand CVE-2026-102764. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70