CVE-2026-102764

Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

Affected

BeyondTrust · Remote Support

CVSS v4.0 CNA

9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

1.18% chance of exploitation in the next 30 days, 67th percentile

CISA KEV

added 2026-10-16

Published

2026-10-15

Updated

2026-10-17

Proof-of-concept exploits (1)

• Worthes/CVE-2026-102764-Proof-of-concept

References

• CVE Record
• NVD entry