Detections
Analytics

CVE-2026-102764

critical

Description

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

References

https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/

https://www.beyondtrust.com/blog/entry/bt26-05

https://nvd.nist.gov/vuln/detail/CVE-2026-102764

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102427

https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066

Details

Source: Mitre, NVD

Published: 2026-10-15

Updated: 2026-10-15

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 9.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

CVSS v4

Base Score: 9.3

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Severity: Critical

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability of Interest