CISA and experts warn of critical authentication bypass vulnerability in BeyondTrust Remote Support, actively exploited by suspected Chinese hackers

A critical authentication bypass vulnerability (CVE-2026-102764) in BeyondTrust Remote Support is being actively exploited by suspected Chinese state-backed threat actors. The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added this zero-day to its Known Exploited Vulnerabilities Catalog, urging customers to patch immediately. The flaw, with a CVSS score of 9.3, impacts versions 0 through 26.2.3 of the platform.