CVE-2026-102764 was exploited on 29 August and nobody knew until 28 September. What made BeyondTrust look was somebody else's incident reaching the news, which is a detection strategy that only works if the other vendor talks.
1 article — 2026-10-16
NOT IN CISA KEV — CATALOG 2026.10.15
Authoritative record
Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.
Not listed in CISA's Known Exploited Vulnerabilities catalog as of catalog 2026.10.15. That is not evidence it is not being exploited — the catalog records what CISA has confirmed, and identifiers have been attacked for days before appearing in it.
CVE-2026-102764 was exploited on 29 August and nobody knew until 28 September. What made BeyondTrust look was somebody else's incident reaching the news, which is a detection strategy that only works if the other vendor talks.