17 October 2026
Reference: CVE-2026-102764
1. What is being reported?
The vulnerability is in how BeyondTrust Remote Support checks where messages come from. It does not properly verify the origin, which means attackers can send fake messages to perform actions like changing or deleting files on the system running the software.
2. What this means in plain English
If your organisation uses BeyondTrust Remote Support, attackers could potentially access and manipulate your support system without permission. This could lead to data loss, disruption of support services, or further security breaches.
3. Could this affect a small business?
Small businesses or charities using BeyondTrust Remote Support could be at risk, especially if the software is connected to the internet or accessible remotely. Organisations not using this product are not affected by this issue.
4. What to do now
- Contact your IT provider or software supplier immediately to check if you use BeyondTrust Remote Support.
- If you do use it, ask for and apply any security updates or mitigations provided by BeyondTrust without delay.
- Review whether the Remote Support system is exposed to the internet and restrict access if possible.
- Follow any additional guidance from your IT provider regarding monitoring and incident response.
5. Ask your IT provider
Do we use BeyondTrust Remote Support, and if so, have we applied the latest security updates or mitigations to protect against the known critical vulnerability CVE-2026-102764?
6. Bottom line
If you use BeyondTrust Remote Support, act quickly to secure it against a critical and actively exploited vulnerability.
Information based on CISA KEV, NVD and multiple reputable security news reports.