{
  "id": 16616071,
  "title": "Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances",
  "url": "https://urgent.news/2026/10/26/counting-the-boxes-a-2-185-asset-inventory-of-beyondtrust-remote",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-26T15:00:22.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/kozhevniko/counting-the-boxes-a-2185-asset-inventory-of-beyondtrust-remote-support-edge-appliances-22f5"
  },
  "original_language": "en",
  "account": "BeyondTrust published an advisory (BT26-05) for its Remote Support product following the discovery of a critical vulnerability (CVE-2026-102764). This vulnerability allows attackers to perform file operations on the appliance due to inadequate validation of message origins. The National Vulnerability Database (NVD) has classified the flaw as CWE-290 (authentication bypass by spoofing) with CVSS scores of 4.0 (CVSS 2.0) and 9.8 (CVSS 3.1). The US Computer Security Incident Response Team (CISA) added the vulnerability to the Known Exploited Vulnerabilities catalog on October 16, 2026, with a remediation due date of October 19, 2026. Several mitigations and a patch are available from the vendor. A recent espionage campaign attributed to the Armory Castle or UNC5221 group exploited this vulnerability, resulting in privilege escalation, lateral movement, and the modification of files that survive reboots and configuration resets.",
  "summary": "Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances Edge appliances are reachable from the internet by design. When a zero-day lands on one of them, the question stops being theoretical and becomes an inventory question. CVE-2026-102764 is a case in point. What the public record establishes BeyondTrust published advisory BT26-05 for its Remote Support…",
  "key_points": [
    "BeyondTrust Remote Support has 2,185 assets requiring inventory",
    "Critical vulnerability (CVE-2026-102764) allows file operations",
    "NVD classified flaw as authentication bypass with high CVSS scores"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}