Critical severityNVD Advisory· Published Oct 15, 2026

CVE-2026-102764

Description

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

Affected products

Etrust/Remote Supportllm-create

Patches

Vulnerability mechanics

References

beyondtrustcorp.service-now.com/csmnvd
nvd.nist.gov/vuln/detail/CVE-2026-102764nvd
www.beyondtrust.com/blog/entry/bt26-05nvd

News mentions

ARMORY CASTLE Exploits BeyondTrust
Mandiant Threat Intelligence · Oct 15, 2026

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000