CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support

CISA AdvisoriesOctober 16, 2026Vulnerabilities Identity

MentionsBeyondTrust

CISA is aware of critical authentication bypass vulnerability CVE-2026-102764 , affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first.

Summary from CISA Advisories.

Read the full article at CISA Advisories

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

CVE-2026-102764Critical 9.3Known exploitedEPSS 1.2%

Other sources covering the same vulnerabilities or event.

CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Rapid7 BlogyesterdayVulnerabilitiesIdentityCVE-2026-102764

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Advisories4d agoVulnerabilitiesGovernanceIdentityCVE-2025-61624 CVE-2026-102764

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The Hacker News5d agoThreat IntelVulnerabilitiesCVE-2026-102764

More in Vulnerabilities

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The Hacker Newsjust nowVulnerabilitiesCVE-2026-96652

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

SecurityWeek1h agoVulnerabilitiesCVE-2026-109618 CVE-2026-109619

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

The Hacker News3h agoAppSecVulnerabilities

Risky Business #856 -- 8-bit encryption, PHP megabugs and more

Podcast1 h 5 minRisky Business3h agoThreat IntelVulnerabilitiesAI

Urgent Livestream - PHP Vulnerabilities: What You Need to Know Today and Do Right Now

VideoSANS Institute6h agoVulnerabilities