grep -rl "CVE-2026-102764" ./articles
CVE-2026-102764 was exploited on 29 August and nobody knew until 28 September. What made BeyondTrust look was somebody else's incident reaching the news, which is a detection strategy that only works if the other vendor talks.
Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.
CISA added this identifier to its Known Exploited Vulnerabilities catalog on 2026-10-16, which means the agency has evidence of exploitation rather than a judgement that exploitation is possible. US federal agencies were required to remediate it by 2026-10-19.
CVE-2026-102764 was exploited on 29 August and nobody knew until 28 September. What made BeyondTrust look was somebody else's incident reaching the news, which is a detection strategy that only works if the other vendor talks.
../cve — every identifier we have covered