Vulnerability intelligence
CVE-2026-102764
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
CVSS Score
9.3
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data · checked 2026-10-16
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Oct 15, 2026 · latest Oct 15, 2026
Associated threat actors
Coverage timeline
-
PRC-linked hackers exploited BeyondTrust flaw to steal credentials and reach internal systemscloud.google.com · Oct 15, 2026