BeyondTrust Remote Support Security Restriction Bypass Vulnerability

BeyondTrust Remote Support Security Restriction Bypass Vulnerability

Release Date: 20 Oct 2026

A vulnerability has been identified in BeyondTrust Remote Support. A remote attacker could exploit this vulnerability to trigger security restriction bypass, data manipulation and spoofing on the targeted system.

 

Note: 

CVE-2026-102764 is being exploited in the wild. The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance. Hence, the risk level is rated as High Risk.  

---

Impact

• Data Manipulation
• Security Restriction Bypass
• Spoofing

---

System / Technologies affected

• Remote Support version 26.2.3 and prior

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://www.beyondtrust.com/trust-center/security-advisories/bt26-05

---

Vulnerability Identifier

• CVE-2026-102764

---

Source

• BeyondTrust

---

Related Link

• https://www.beyondtrust.com/trust-center/security-advisories/bt26-05
• https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-urges-patching-critical-vulnerability-beyondtrust-remote-support