BeyondTrust Remote Support (RS) <= 26.2.3 Improper Origin Validation (BT26-05)

The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 26.2.3. It is, therefore, potentially affected by an improper origin validation vulnerability: - The internal messaging component of BeyondTrust Remote Support RS does not adequately validate the origin o...

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The China-nexus cyber espionage group tracked as Armory Castle previously UNC5221 or Warp Panda exploited a newly disclosed security flaw in BeyondTrust Remote Support formerly Bomgar as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 CVSS score: 9.3, is a case of...

CVE-2026-102764

BeyondTrust Remote Support versions prior to 26.2.3 are vulnerable to an unauthenticated file upload flaw caused by insufficient validation of message origins within internal components. This allows a remote attacker to perform arbitrary file operations, potentially leading to full host compromis...

CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance...

Improper Origin Validation

Bokeh is vulnerable to improper origin validation. The vulnerability is due to flawed allowlist matching of the WebSocket Origin header, which allows an attacker to register a look-alike domain or subdomain that bypasses origin checks and establish a WebSocket connection to the Bokeh server...

EUVD-2019-13353

Malware in sbrugna...

Cross-Site Request Forgery (CSRF)

github.com/gorilla/csrf is vulnerable to Cross Site Request Forgery CSRF. The vulnerability is due to improper origin validation caused by relying on the r.URL.Scheme field to detect TLS, which is not set for server requests, allowing an attacker with XSS on a related domain to perform...

Improper Origin Validation

github.com/jub0bs/cors is vulnerable to Improper Origin Validation. The vulnerability due to middleware configured with multiple origin patterns that share a similar suffix which mistakenly permits access from some untrusted origins, potentially leading to cross-origin attacks...

Improper Origin Validation

github.com/jub0bs/fcors is vulnerable to Improper Origin Validation. The vulnerability is due to the lack of proper validation of origin patterns, which permits untrusted origins sharing suffixes with allowed ones...

CVE-2019-3718

Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems...

CVE-2019-3718: Cross-Site Request Forgery (CSRF)

Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems...