Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances
Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances Edge appliances are reachable from the internet by design. When a zero-day lands on one of them, the question stops being theoretical and becomes an inventory question. CVE-2026-102764 is a case in point. What the public record establishes BeyondTrust published advisory BT26-05 for its Remote Support…
BeyondTrust published an advisory (BT26-05) for its Remote Support product following the discovery of a critical vulnerability (CVE-2026-102764). This vulnerability allows attackers to perform file operations on the appliance due to inadequate validation of message origins. The National Vulnerability Database (NVD) has classified the flaw as CWE-290 (authentication bypass by spoofing) with CVSS scores of 4.0 (CVSS 2.0) and 9.8 (CVSS 3.1).
The US Computer Security Incident Response Team (CISA) added the vulnerability to the Known Exploited Vulnerabilities catalog on October 16, 2026, with a remediation due date of October 19, 2026. Several mitigations and a patch are available from the vendor. A recent espionage campaign attributed to the Armory Castle or UNC5221 group exploited this vulnerability, resulting in privilege escalation, lateral movement, and the modification of files that survive reboots and configuration resets.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
