Source: ncsc.nl
BeyondTrust has patched a critical vulnerability in BeyondTrust Remote Support, identified as CVE-2026-102764 with a CVSS score of 9.3. The vulnerability involves insufficient validation of message origins within internal product components. An unauthenticated remote attacker can exploit this flaw to place or modify files on an affected appliance. All Remote Support versions up to and including 26.2.3 are affected. BeyondTrust has confirmed that CVE-2026-102764 was actively exploited as a zero-day vulnerability in the wild.
