BeyondTrust · BeyondTrust Remote Support
Updated October 17, 2026
BeyondTrust Remote Support suffers an authentication‑bypass flaw that can be exploited by spoofing a trusted component. The vulnerability enables a remote unauthenticated adversary to execute arbitrary file operations on the appliance, making it a prime target for ransomware and data‑destruction campaigns.
An attacker could upload, modify, or delete critical support files, potentially installing ransomware or stealing confidential data without any user interaction.
Apply the vendor‑released patch immediately; if patching is not possible, restrict network access to the appliance, enforce multi‑factor authentication, and monitor for abnormal file‑system activity.
More active vulnerabilities