Vulnerability Report

CVE-2026-102764

CISA KEV Active

Title: BeyondTrust Remote Support Internal File Operations

File Operations

Proof Of Concept

PoC Available for CVE-2026-102764

CWE Category CWE-290

Published Date Oct 15, 2026

Modified Date Oct 17, 2026

Exploit Status Available

Score 9.3 CVSS v4.0

Exploit Probability (EPSS)

20.34%

Vulnerability Summary

CVE-2026-102764: The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

Impacted Vendors

beyondtrust 1

Reference Links

https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066 https://nvd.nist.gov/vuln/detail/CVE-2026-102764 https://www.beyondtrust.com/blog/entry/bt26-05

CVSS v4.0

Source Entity 13061848-ea10-403d-bd75-c83a022c2891

Severity CRITICAL

9.3

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

N/A

RAW VECTOR

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

Source Entity [email protected]