BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 16/10/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| remote support | ≤ 26.2.3 |
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free