CISA Urges Immediate Patching for Actively Exploited Critical Vulnerability in BeyondTrust Remote Support

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert urging organizations to immediately patch a critical authentication bypass vulnerability (CVE-2026-102764) affecting BeyondTrust Remote Support (versions 26.2.3 and earlier). Cyber threat actors are actively exploiting this flaw to gain initial access, establish persistence, escalate privileges, and move laterally within affected systems. CISA added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog on October 16, 2026, emphasizing the urgency of applying available patches.