Serial number:AV26-1060
Date:October 16, 2026

As of October 15, 2026, Google is affected by vulnerabilities in the following product:

• Chrome
  • Versions prior to 155.0.8059.84/.85 (Windows/Mac) and 155.0.8059.84 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Chrome Releases: Stable Channel Update for Desktop

Serial Number: AV26-1059
Date: October 16, 2026

As of October 15, 2026, BMC Helix is affected by a vulnerability in the following product:

• BMC Helix Network Management
  • Prior to 26.3.01

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• BMC Helix Network Management 26.3.01 On-prem Release Notes
• BMC Helix On-prem Release Notes

Serial number:AV26-1054
Date:October 16, 2026
Updated: October 16, 2026

As of October 15, 2026, BeyondTrust is affected by a vulnerability in the following product:

• Remote Support
  • Prior to or equal to 26.2.3

Open-source reporting indicates that CVE-2026-102764 is being exploited in the wild.

Update 1

On October 16, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-102764 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• ARMORY CASTLE and BT26-05: What Security Teams Need to Know | BeyondTrust
• Security Advisories | BeyondTrust
• CISA KEV: CVE-2026-102764

Serial Number: AV26-1058
Date: October 16, 2026

As of October 14, 2026, Progress is affected by vulnerabilities in the following product:

• MOVEit Transfer
  • Prior to 2025.1.6
  • Prior to 2026.0.4

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• MOVEit Transfer Critical Security Bulletin - September 2026
• Progress Trust Center

Number: AL26-025
Date: October 16, 2026

Audience

This Alert is intended for IT professionals and managers.

Purpose

An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested.

Details

The Canadian Centre for Cyber Security (Cyber Centre) is aware of a critical vulnerability affecting BeyondTrust Remote Support (RS)^{Footnote1Footnote2}. In response to the vendor advisory released on October 15, 2026, the Cyber Centre released AV26-1054 on October 16, 2026^Footnote3.

Tracked as CVE-2026-102764^Footnote4, this vulnerability is an Authentication Bypass by Spoofing vulnerability (CWE-290)^Footnote5 that affects all versions of BeyondTrust Remote Support.

Successful exploitation of this vulnerability may allow a remote, unauthenticated attacker to exploit insufficient origin validation in internal BeyondTrust Remote Support messaging components to perform unauthorized file operations on an affected appliance without user interaction. The vulnerability requires no credentials or user action and can enable arbitrary file uploads, potentially resulting in full compromise of the appliance.

The Cyber Centre has observed open-source reporting indicating that the vulnerability is being exploited in the wild^Footnote6.

Suggested actions

The Cyber Centre strongly recommends that organizations running affected BeyondTrust Remote Support deployments upgrade to the following fixed version:

BeyondTrust has confirmed that a patch addressing this vulnerability was applied to all Remote Support SaaS and Privileged Remote Access SaaS customers as of 9 October 2026. Organizations using these SaaS offerings do not need to take any additional action to remediate this issue.

The Cyber Centre also recommends organizations to:

• identify BeyondTrust Remote Support deployments within their environments and determine whether they are SaaS-hosted or self-hosted
• verify the installed Remote Support version. Systems running 26.2.3 or earlier are identified as affected by BeyondTrust
• upgrade Remote Support installations older than 24.3.1 to a newer supported version before applying the remediation patch
• apply the BT26-05-RS patch to affected self-hosted Remote Support deployments running versions 24.3.1 through 26.2.3
• confirm automatic updates are enabled, where appropriate. BeyondTrust specifically advises manual patching for self-hosted instances that are not subscribed to automatic updates
• as an additional defensive measure, review affected appliances for unexpected or unauthorized file activity, particularly when an appliance was exposed while vulnerable

In addition, the Cyber Centre strongly recommends that organizations review and implement the Cyber Centre’s Top 10 IT Security Actions^Footnote7 with an emphasis on the following topics:

• consolidating, monitoring, and defending Internet gateways
• patch operating systems and applications
• harden operating systems and applications
• isolate web-facing applications

Should activity matching the content of this alert be discovered, recipients are encouraged to report via My Cyber Portal, or email contact@cyber.gc.ca.

References

Serial number:AV26-1035
Date:October 13, 2026
Updated:October 16, 2026

As of October 13, 2026, Ivanti is affected by vulnerabilities in the following products:

• Ivanti Connect Secure
  • Version 25.1.1.1 and prior
  • Version 25.2.2 and prior
  • Version 22.8R2.4 and prior
• Ivanti Neurons Patch for Intune
  • Versions prior to September 16, 2026
• Ivanti Xtraction
  • Version 2026.2.1 and prior

On October 13, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-104935 to their Known Exploited Vulnerabilities (KEV) Database.

Update 1

Open-source reporting indicates that CVE-2026-111357 is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Advisory Ivanti Connect Secure (CVE-2026-104935)
• Security Advisory Ivanti Xtraction (Multiple CVEs)
• Security Advisory Ivanti Neurons Patch for Intune October 2026 (CVE-2026-109412)
• Ivanti Security Advisories
• CISA KEV: CVE-2026-104935