CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Overview On October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support (RS) , its platform for remotely troubleshooting and administering endpoints. Tracked as CVE-2026-102764 and assigned a CVSSv4 score of 9.3 , the vulnerability allows unauthenticated remote attackers to perform file operations on an affected appliance without user interaction.

Summary from Rapid7 Blog.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

• CVE-2026-102764Critical 9.3Known exploitedEPSS 1.2%

Related coverage

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The Hacker Newsjust nowVulnerabilitiesCVE-2026-96652

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

SecurityWeek1h agoVulnerabilitiesCVE-2026-109618CVE-2026-109619

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

The Hacker News3h agoAppSecVulnerabilities

Risky Business #856 -- 8-bit encryption, PHP megabugs and more

Podcast1 h 5 minRisky Business3h agoThreat IntelVulnerabilitiesAI

Urgent Livestream - PHP Vulnerabilities: What You Need to Know Today and Do Right Now

VideoSANS Institute6h agoVulnerabilities