Experts and CISA Sound Alarm Over Critical BeyondTrust Remote Support Vulnerability (CVE-2026-102764)

Chinese hackers are actively exploiting CVE-2026-102764, a critical authentication bypass vulnerability in BeyondTrust Remote Support. The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added this zero-day to its Known Exploited Vulnerabilities Catalog, urging customers to patch immediately to version 24.3.1 or later by October 19, 2026. The flaw, with a CVSS score of 9.3, impacts versions 0 through 26.2.3 and allows remote attackers to perform file operations on affected appliances.