BeyondTrust Discovery Agent 26.2.1 release notes
August 18th, 2026
This release is available by download from the BeyondTrust Client Portal.
🆕 New features
Improved backup and restore functionality
We added the appliance service accounts access to the necessary resources for backup and restore functionality.
Increased security hardening of scanner
The scanner now includes additional security hardening enhancements designed to improve protection, strengthen system integrity, and support a more secure deployment.
✨ Enhancements
There are no new enhancements in this release.
⛔ Known issues
- Windows PowerShell doesn't properly send the command line options for btdiscovery.cmd to the program. This command needs to be run in a standard windows command shell.
- There is an issue running the Discovery Agent with .NET Hosting 8.0.1. Either downgrade to 8.0.0 or upgrade to 8.0.2 or greater.
- Sybase authentication is not supported for IPv6.
- MySQL 9 on Linux enumeration is not supported at that time.
🛠️ Issues resolved
| Product area | Description | Resolution |
|---|---|---|
| Discovery | Certain characters were improperly escaped, causing duplicate or missing COM services in the discovery data. | Characters are now escaped correctly, and COM services appear accurately in the discovery data. |
| Discovery | Scans failed when the target address group was not properly defined by the BeyondInsight Central Policy messages. | A recovery path now handles cases where the target address group is not properly defined. |
| Discovery | Restoring the Remote Registry Service on a target caused the DFS service to stop. | The scanner no longer stops the Remote Registry Service when other running services depend on it. |
📝 Requirements
- There is a product dependency on having the .NET 8 Hosting package installed.
- OAuth authorization is dependent on having BI version 24.2.0.
- The Central Policy message to retrieve all scheduled scans is dependent on BI version 24.3.0 and higher.
⚙️ Signatures
- The MD5 signature is: 76b1d37d9d6ff2e79bb2e979a30740c4
- The SHA-1 signature is: 17e11c3f6b676ee22b57d93892af48930095cdfb
- The SHA256 signature is: af63e1540031f4af1a27ca0814b9385ae0f7b90ca2f7d0c9e2a20446cb3ac1e6
⏰ Deprecation notice
- Support for SSH Session encryption using the SHA1 cipher is removed. SHA256 or higher should be used.
- Support for DSA encryption as an SSH authentication cipher has been removed.
- Support for Windows 8 and Server 2012 as a scanner host is no longer supported.
- Support for Windows Server 2016 as a scanner host is deprecated.
