CISA adds BeyondTrust Remote Support flaw to its exploited list

CISA has added a critical authentication-bypass vulnerability (CVE-2026-102764) in BeyondTrust Remote Support to its Known Exploited Vulnerabilities list; self-hosted appliances running 26.2.3 and earlier are vulnerable and should apply patch BT26-05-RS (or upgrade if older than 24.3.1). The flaw requires no credentials, can enable arbitrary file uploads and potential full appliance compromise (CVSS v3.1 9.8), and CISA reports active exploitation — organizations should inventory deployments (SaaS vs self-hosted), apply patches, restrict access to admin interfaces, monitor for signs of compromise, isolate and rebuild suspected appliances, and rotate stored credentials.