BeyondTrust describes two affected customers in its October 16 update. That scope does not establish broad compromise of every installation. The public advisory says hosted Remote Support was patched by October 9.
Privileged Remote Access shares affected code and received a precautionary patch, but BeyondTrust did not identify a working exploitation path in PRA. Do not label PRA exploitation as confirmed.
CISA exploitation evidence
Catalog 2026.10.23 · Checked Oct 24, 2026 UTC
CISA lists this CVE in its Known Exploited Vulnerabilities catalog. This confirms known exploitation, not compromise of your environment.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA’s federal deadlines and requirements are shown for context. They are not a universal deadline for private organizations or businesses in Latin America. The date added is the catalog inclusion date, not the first attack date.
BeyondTrust
Response checklist
0 of 3 complete
Sources
Technical facts come from these sources. Priorities and suggested reviews are Oktsec’s analysis.