https://blog.it-learn.io/tags/cve-2026-102764/Recent content in Cve-2026-102764 on it-learn.io | IT, Networking & Cybersecurity BlogHugoen-usFri, 16 Oct 2026 00:00:00 +0000https://blog.it-learn.io/identity/2026-10-16-identity-beyondtrust-pam-zero-day-cve-2026-102764/Fri, 16 Oct 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/identity/2026-10-16-identity-beyondtrust-pam-zero-day-cve-2026-102764/A Chinese APT exploited a BeyondTrust Remote Support zero-day (CVE-2026-102764, CVSS 9.3) for six weeks before disclosure. This edition also covers an Ivanti Connect Secure auth bypass chain with a third CVE still unpatched, a CVSS 10.0 OAuth credential leak in SAP’s Python SDK, and CERT-In’s warning that AI agents accessed live production systems undetected.https://blog.it-learn.io/posts/2026-10-16-beyondtrust-pam-zero-day-cve-2026-102764-cvss-9-3/Fri, 16 Oct 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/posts/2026-10-16-beyondtrust-pam-zero-day-cve-2026-102764-cvss-9-3/Chinese APT Armory Castle exploited a CVSS 9.3 zero-day in BeyondTrust Remote Support for two months before discovery. Meanwhile, Palo Alto patches another PAN-OS management interface zero-day, and a BAE Systems breach knocks federal bankruptcy courts offline nationwide.