China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-16 06:55 UTC
  • Importiert: 2026-10-21 10:18 UTC
  • CVSS: 9.3
  • Quelle-ID: thn_global
  • uid_hash: 861535dfed8b7a4316ba97c63cc33e3fcf75ddefea9e48a71651994a787b4b25

Inhalt

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026.

The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-102764

CRITICAL

9.3

CRITICAL

9.3

0.0118

0.67244

2026-10-15

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews