CVE-2026-102764— Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
Quick assessment
Affected
BeyondTrust Remote Support
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
该漏洞存在于 BeyondTrust Remote Support 产品的内部组件中。这些组件未能充分验证所接收消息的来源。在适当条件下，攻击者可能利用此漏洞对设备进行文件操作。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1210 · Exploitation of Remote Services
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102764
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
Source: CVE Program / CVE List V5
Vulnerability Description
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用欺骗进行的认证绕过
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| BeyondTrust | Remote Support | 0 ~ 26.2.3 | - |
|
II. Public POCs for CVE-2026-102764
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102764
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-102764 (1)
Security Blog Posts for CVE-2026-102764 (1)
Vendor Pages for CVE-2026-102764 (1)
IV. Related Vulnerabilities
Same product: Remote Support
-
CVE-2026-40141
High-Severity Vulnerability In Web Application Component of -
CVE-2026-40140
High-Severity Pre-Authentication Vulnerability in BeyondTrus -
CVE-2026-40139
Critical Pre-Authentication Vulnerability in BeyondTrust Rem -
CVE-2026-40138
Critical Pre-Authentication Vulnerability in BeyondTrust Rem -
CVE-2024-12356
Command Injection Vulnerability in Remote Support(RS) & Priv
Same vendor: BeyondTrust
-
CVE-2026-40145
Control protections bypass in BeyondTrust Endpoint Privilege -
CVE-2026-40144
Memory corruption vulnerability in Endpoint Privilege Manage -
CVE-2026-40141
High-Severity Vulnerability In Web Application Component of -
CVE-2026-40140
High-Severity Pre-Authentication Vulnerability in BeyondTrus -
CVE-2026-40139
Critical Pre-Authentication Vulnerability in BeyondTrust Rem
Same weakness: CWE-290
-
CVE-2026-102946
joserfc: JWS signature verification bypass via empty signatu -
CVE-2026-110723
api-gateway 1.7.3及以下版本速率限制绕过漏洞 -
CVE-2026-57489
FileRise: AUTH_BYPASS reverse-proxy header trust without sou -
CVE-2026-110768
holaOS through 2026.822.1 Authorization Bypass via Telegram -
CVE-2026-106465
NetX Secure DTLS服务器存在绕过验证漏洞
V. Comments for CVE-2026-102764
No comments yet