Tag: cve 2026 102764
2 articles
China-Linked Hackers Exploit BeyondTrust Zero-Day to Breach Remote Support Servers
A high-severity flaw in BeyondTrust Remote Support was exploited as a zero-day by a China-linked group, allowing them to take control of at least one self-hosted remote support appliance. The vulnerability, rated CVSS 9.3, was swiftly patched by BeyondTrust for SaaS customers, with self-hosted customers receiving manual update instructions.
BeyondTrust Zero-Day Exploited in Targeted Attacks Since August
A critical zero-day vulnerability, CVE-2026-102764, has been exploited in targeted attacks since late August, putting BeyondTrust Remote Support users at risk of file operations and even full root control by unprivileged remote attackers. The flaw affects Remote Support builds 26.2.3 and earlier, but thankfully, patches are available.