Overview
BeyondTrust
BeyondTrust has released a new security advisory addressing an actively exploited, critical vulnerability affecting their Remote Support product. Messages received by the internal components of Remote Support were not adequately validated, and under the right conditions, could allow an attacker to perform file operations on the appliance.
- CVE-2026-102764 – Authentication Bypass by Spoofing Vulnerability – CVSSv4.0 Score: 9.3.
Affected Versions:
- All versions of BeyondTrust Remote Support from v26.2.3 and below.
Cisco
Cisco has released a security advisory addressing a vulnerability within the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. Successful exploitation of this vulnerability could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
- CVE-2026-76519 – Relative Path Traversal Vulnerability – CVSSv3.1 Score: 9.8
Affected Versions:
- Cisco AsyncOS Software for Cisco Secure Email Gateway Release:
- 15.5: all versions before 15.5.5-014
- 16.0: all versions of 16.0 are vulnerable
- 16.5: all versions before 16.5.0-780
Although Cisco strongly recommends migrating to Release 16.5.0-780 if running an earlier version of the software.
Palo Alto
Palo Alto has released a security advisory regarding a recent actively exploited, high-severity vulnerability discovered within the management interface of Palo Alto Networks PAN-OS software. Successful exploitation of this vulnerability enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The risk posed by this issue can be reduced by restricting access to the management interface to only trusted internal IP addresses.
- CVE-2026-0322 – Code Injection Vulnerability – CVSSv4.0 Score 8.6
Affected Versions:
- PAN-OS 12.2: all versions below 12.2.4
- PAN-OS 12.1: all versions below 12.1.4-h12, 12.1.7-h8, and 12.1.10-h2
- PAN-OS 11.2: all versions below 11.2.4-h22, 11.2.7-h21, 11.2.10-h15, 11.2.13-h3, and 11.2.16
- PAN-OS 11.1: all versions below 11.1.4-h37, 11.1.6-h39, 11.1.7-h11, 11.1.10-h35, 11.1.13-h15, and 11.1.16-h3
- PAN-OS 10.2: all versions below 10.2.7-h38, 10.2.10-h41, 10.2.13-h26, 10.2.16-h11, and 10.2.18-h12
Recommended Action
Organisations are encouraged to review the appropriate security advisory pages and apply the updates:
BeyondTrust: BT26-05 Security Advisory & BT26-05 Extended Blog
Cisco: Cisco Security Advisory
Palo Alto: Palo Alto Security Advisory