BreakingCyber Security
CISA Warns of Actively Exploited Critical Flaw in BeyondTrust Remote Support
CISA has flagged CVE-2026-102764, a critical authentication bypass affecting self-hosted BeyondTrust Remote Support versions 26.2.3 and earlier. Threat actors are actively using it to gain initial access, establish persistence, escalate privileges, and move laterally inside networks. The flaw was added to CISA's Known Exploited Vulnerabilities catalog on October 16, 2026, and a patch (BT26-05-RS) is available for supported versions 24.3.1 and later.