CVE-2026-102764 zero-day exploited in attacks

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a

Published 16-Oct-2026 08:32 UTC · First seen 16-Oct-2026 08:31 UTC

Sources

• The Hacker News · 16-Oct-2026