News
ai Making the internet better for AI agents might make it worse for everyone else - MIT Technology Review cybersecurity Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks - SecurityWeek ai “We were looking at it wrong”: The explosive claim that’s upended the AI world - MIT Technology Review cybersecurity Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor - The Hacker News cybersecurity OpenCode hack exposes API keys amid AI distillation attacks - BleepingComputer cybersecurity Weekly Cybersecurity Newsletter — Top 50 Cybersecurity Stories of the Week - CyberPress threat-intel Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding - GBHackers cybersecurity Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor - The Hacker News cybersecurity WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot - Wired Security vulnerability Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED) - Rapid7 Vulnerability Disclosure cybersecurity Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw - SecurityWeek cybersecurity Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack - SecurityWeek threat-intel Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779 - Rapid7 Emergent Threat Response threat-intel Supply Chain Zero Days: Closing the Gap Between Publication and Detection - Wiz Research threat-intel CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild - Rapid7 Emergent Threat Response
1 / 15
All news ›
Threat Intel

CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Rapid7 Emergent Threat Response ·

Overview On October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support (RS) , its platform for remotely troubleshooting and administering endpoints. Tracked as CVE-2026-102764 and assigned a CVSSv4 score of 9.3 , the vulnerability allows unauthenticated remote attackers to perform file operations on an affected appliance without user interaction. Versions 26.2.3 and earlier are affected unless the BT26-05-RS patch has been applied. BeyondTrust has confirmed that exploitation in the wild has already occurred prior to disclosure. Its October 16 report dates the two known Remote Support compromises to August 29, 2026: one BeyondTrust-hosted instance and one self-hosted appliance. BeyondTrust discovered and contained the hosted compromise on September 28; Mandiant shared corroborating findings from the self-hosted investigation on September 30. On October 16, 2026, CVE-2026-102764 was added to the U.S. Cybersecurity and Infrastructure Security Agency's (CISA

Continue on Rapid7 Emergent Threat Response ↗ ‹ All news Get the newsletter

The summary and image come from Rapid7 Emergent Threat Response; the image is shown from their website.