Detections
Analytics
BeyondTrust Remote Support (RS) <= 26.2.3 Improper Origin Validation (BT26-05)
critical Nessus Plugin ID 367772
Synopsis
An application running on the remote web server is affected by an improper origin validation vulnerability.Description
The version of BeyondTrust Remote Support (RS) running on the remote host is prior or equal to 26.2.3. It is, therefore, potentially affected by an improper origin validation vulnerability:- The internal messaging component of BeyondTrust Remote Support (RS) does not adequately validate the origin of the messages it receives. Under the right conditions, this could allow a remote attacker to perform file operations on the affected appliance. (CVE-2026-102764)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Apply the BT26-05-RS patch. Customers on a version older than 24.3.1 must upgrade to a newer version before applying the patch.See Also
https://www.beyondtrust.com/blog/entry/bt26-05
https://www.beyondtrust.com/trust-center/security-advisories/bt26-05
Plugin Details
Severity: Critical
ID: 367772
File Name: beyondtrust_remote_support_26_2_3_bt26_05.nasl
Version: 1.1
Type: Combined
Agent: windows
Family: CGI abuses
Published: 10/20/2026
Updated: 10/20/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
Percentile: 99.87
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-102764
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4
Risk Factor: Critical
Base Score: 9.3
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
CPE: cpe:/a:beyondtrust:remote_support
Required KB Items: installed_sw/BeyondTrust Remote Support
Patch Publication Date: 10/8/2026
Vulnerability Publication Date: 10/15/2026
Reference Information
CVE: CVE-2026-102764