criticalKEV
CVE-2026-102764
BeyondTrust Remote Support <= 26.2.3: internal components do not validate message origin, allowing file operations on the appliance (CVSS 9.3)
- Severity
- critical
- Affected product
- BeyondTrust Remote Support
- Affected versions
- BeyondTrust Remote Support ≤ 26.2.3
- Fixed in
- BeyondTrust Remote Support a release above 26.2.3 - see BeyondTrust advisory BT26-05
- Detection basis
- Appliance fingerprint
- Shipped rule
- BeyondTrust Remote Support: BeyondTrust Remote Support <= 26.2.3: internal components do not validate message origin, allowing file operations on the appliance (CVSS 9.3)
- CISA KEV
- Listed as a known exploited vulnerability
- EPSS
- 1% chance of exploitation in the next 30 days
- Added to NewScan
- 2026-10-17
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
APPLIANCE FINGERPRINT
NewScan fingerprints the BeyondTrust Remote Support appliance and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.