vulnerability
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CriticalCVSS 9.3Exploited
Summary
CISA has issued an advisory urging organizations to immediately patch a critical authentication bypass vulnerability (CVE-2026-102764) in BeyondTrust Remote Support. Cyber threat actors are actively exploiting this vulnerability to gain initial access, establish persistence, escalate privileges, and move laterally within organizations. Organizations should upgrade to a supported version (24.3.1 and later) or apply the BT26-05-RS patch, and implement additional security measures to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 7 other source(s)
- CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
- CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
- CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
- Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
- Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
- The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
- BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs