AL26-025 - Critical vulnerability impacting BeyondTrust Remote Support – CVE-2026-102764

**AL26-025 — Critical BeyondTrust Remote Support vulnerability (CVE-2026-102764):** The Canadian Centre for Cyber Security warns of an authentication-bypass by spoofing in BeyondTrust Remote Support that allows unauthenticated remote arbitrary file uploads and potential full appliance compromise; exploitation has been observed in the wild. The alert directs organizations to identify affected deployments, apply the BT26-05-RS patch or upgrade to fixed versions (SaaS instances were patched by the vendor), review appliances for unexpected file activity, and follow broader hardening and patching best practices.