OTX Threat: CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

A critical authentication bypass vulnerability in BeyondTrust Remote Support platform allows unauthenticated remote attackers to perform file operations without user interaction. Versions 26.2.3 and earlier are affected. BeyondTrust confirmed exploitation in the wild with two compromises dating to August 29, 2026, affecting one hosted instance and one self-hosted appliance. Mandiant investigation CVEs: CVE-2026-1731, CVE-2026-21589, CVE-2026-97229, CVE-2026-104935, CVE-2026-102764