CVE-2026-102764: Unauthenticated File Upload BeyondTrust

CVE-2026-102764 affects internal components of BeyondTrust Remote Support. The flaw stems from inadequate validation of message origin, allowing an attacker to perform file operations on the appliance without authentication. Remote Support is a critical enterprise solution for remote access and technical support.

The vulnerability has CVSS 9.8 and is declared critical. Published on October 15, 2026 on NVD. There are signals on social networks indicating active attention (4 posts in the last 24 hours). One post mentions availability of technical details and a Metasploit module, but these signals are not confirmed by official sources.

System administrators with BeyondTrust Remote Support deployments must verify their system status and await official patches from BeyondTrust. While awaiting fixes, consider segmenting infrastructure and limiting appliance access to trusted sources. Monitor logs for anomalous or unauthorized file operations.