BeyondTrust Remote Support Flaw Exploited Before Disclosure
The report describes an authentication bypass and urges emergency remediation and investigation.
BeyondTrust has confirmed that an authentication bypass in Remote Support was exploited before disclosure, according to the report.
The flaw allows unauthenticated remote attackers to perform file operations on an affected appliance without user interaction. The report describes compromises involving a vendor-hosted instance and a self-hosted appliance.
The vulnerability also appears in CISA's Known Exploited Vulnerabilities Catalog. That listing records evidence of active exploitation, reinforcing the report's call for an urgent response.
The report recommends emergency remediation and investigation for earlier compromise. The linked analysis provides affected-version and patch guidance alongside the supporting incident reporting.
Vulnerability identifier
Sources
If something here is wrong, tell us. Every correction is listed on the corrections page.
Don’t Just Read About Cyberattacks. Learn How They Work.
Go beyond the headlines. Explore hands-on cybersecurity labs, understand real-world vulnerabilities, and build practical security skills with HackZoneLabs.
Start Learning