CVE-2026-102764 added to CISA KEV: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

<p>CISA is aware of critical authentication bypass vulnerability <a href="https://www.cve.org/CVERecord?id=CVE-2026-102764" target="_blank">CVE-2026-102764</a>, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first. Cyber threat actors are actively exploiting the vulnerability to gain initial access, then establishing persistence, escalating privileges, and moving laterally. CISA added CVE-2026-102764 to its <a href="https://www.cisa.gov/known-ex…