Summary
BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.
- Vendor
- BeyondTrust
- Product
- Remote Support
- Added to KEV
- Oct 16, 2026
- Remediation due
- Oct 19, 2026 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-290
- EPSS
- 79.5% as of Nov 12
In the news · last mention Oct 19
Linked
Actors named alongside it:
Incidents exploiting it:
References