CVE-2026-102764
BeyondTrust Remote Support
Parchea ya: se está explotando
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
En las noticias
- Validación incorrecta del origen en Remote Support de BeyondTrust · INCIBE-CERT
- Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day · SecurityWeek
- Omisión de autenticación mediante suplantación en Remote Support de BeyondTrust · INCIBE-CERT
- China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers · The Hacker News