Source: cisa.gov
CVE-2026-102764 is an authentication bypass by spoofing vulnerability affecting BeyondTrust Remote Support. A remote attacker could exploit this flaw to perform unauthorized file operations on the affected appliance. The vulnerability has been flagged by CISA and is subject to BOD 26-04, which mandates prioritizing security updates based on risk. BeyondTrust has published a security advisory with remediation guidance. CISA has also provided forensics triage requirements as part of the directive's implementation guidance. The vulnerability is tracked in the NVD and carries a high criticality rating. Organizations using BeyondTrust Remote Support are urged to apply patches promptly.
