Is CVE-2026-102764 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-102764

BeyondTrust has released security updates to address CVE-2026-102764. All users of BeyondTrust Remote Support should apply the latest patches immediately. Additional hardening measures include restricting network access to management interfaces, monitoring for anomalous remote support activity, and reviewing vendor hardening guidance.

Quick answers

What is CVE-2026-102764?: BeyondTrust has released security updates to address CVE-2026-102764. All users of BeyondTrust Remote Support should apply the latest patches immediately. Additional hardening measures include restricting network access to management interfaces, monitoring for anomalous remote support activity, and reviewing vendor hardening guidance.
How severe is CVE-2026-102764?: critical, CVSS 9.3
Is CVE-2026-102764 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-102764 be mitigated?: BeyondTrust has released security updates to address CVE-2026-102764. All users of BeyondTrust Remote Support should apply the latest patches immediately. Additional hardening measures include restricting network access to management interfaces, monitoring for anomalous remote support activity, and reviewing vendor hardening guidance.

CVSS

9.3

Vendor

BeyondTrust

Published

Oct 17, 2026 · 08:30

Patch

Unknown / not confirmed

Affected products

BeyondTrust Remote Support

Mitigation

China-Linked Espionage Group Exploits BeyondTrust Remote Support Zero-Day

A China-nexus cyber espionage group, tracked as Armory Castle, exploited a zero-day vulnerability in BeyondTrust Remote Support in late August 2026. The flaw, tracked as CVE-2026-102764 with a CVSS score of 9.3, involves improper origin validation in an internal messaging component. BeyondTrust has since released patches to address the vulnerability.

11m

CVE-2026-102764

Quick answers

Related News

China-Linked Espionage Group Exploits BeyondTrust Remote Support Zero-Day