As cited
Copy frozen at (site build).
vulnerabilities
Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
An origin-validation flaw in BeyondTrust Remote Support allows unauthenticated attackers to forge local message source addresses, bypassing authentication checks on the file-transfer service. Attackers can write arbitrary files to the appliance and achieve remote code execution as the site operating-system user by uploading a PHP file to the public web directory. A Metasploit module demonstrates the exploit chain on Remote Support 24.1.2, executing code without any account credentials or user interaction.
Why it matters: Organizations running BeyondTrust Remote Support are exposed to unauthenticated remote code execution from the public customer connection endpoint; immediate patching is critical as the vulnerability is tracked in the Known Exploited Vulnerabilities (KEV) catalog.
- Source published
- First seen by Cybersecurity Tracker