WATCHExploited vulnerability
BeyondTrust Remote Support
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
What's happening and what to do
A remote attacker can bypass login by spoofing identity and then perform file operations on the appliance, and this flaw is being actively exploited. BeyondTrust Remote Support. Apply the vendor's update now and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-16Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-10-19Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.