BeyondTrust
Vulnerability activity for BeyondTrust: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 1
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Last 90 days
- CVEs
- 2
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Last 365 days
- CVEs
- 3
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 2
- With exploit code
- 1
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.3CriticalOct 16, 2026BeyondTrust Remote Support Auth bypass / access controlCVE-2026-102764BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.Added to KEV Oct 16, 2026Exploited1.2% likely
- 9.9CriticalFeb 13, 2026BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) Code / command injectionCVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption.Added to KEV Feb 13, 2026Exploited92% likelyExploit codeMetasploit · NucleiDetection
- 6.6MediumDec 18, 2024BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Code / command injectionCVE-2024-12686BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.Added to KEV Jan 13, 2025 · 25 days after publicationExploited32% likely
- 9.8CriticalDec 17, 2024BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Code / command injectionCVE-2024-12356BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user. Added to KEV Dec 19, 2024 · 2 days after publicationExploited87% likelyExploit codeMetasploit
Recent
- 9.3CriticalOct 16, 2026BeyondTrust Remote Support Auth bypass / access controlCVE-2026-102764BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.Exploited1.2% likely
- 7.1HighAug 17, 2026BeyondTrust Endpoint Privilege Management (Windows deployment)CVE-2026-40145A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.
- 9.9CriticalFeb 13, 2026BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) Code / command injectionCVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption.Exploited92% likelyExploit codeMetasploit · NucleiDetection
- 6.6MediumDec 18, 2024BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Code / command injectionCVE-2024-12686BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.Exploited32% likely
- 9.8CriticalDec 17, 2024BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Code / command injectionCVE-2024-12356BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user. Exploited87% likelyExploit codeMetasploit
Top products
- Remote Support (RS) and Privileged Remote Access (PRA)1 CVE in the last year, 1 critical, 1 exploited
- Remote Support1 CVE in the last year, 1 critical, 1 exploited
- Endpoint Privilege Management (Windows deployment)1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 16, 2026BeyondTrust security advisory (AV26-1054) – Update 1CVE-2026-102764
- CCCS (Canada) · Oct 16, 2026AL26-025 - Critical vulnerability impacting BeyondTrust Remote Support – CVE-2026-102764CVE-2026-102764
- CISA · Oct 16, 2026CISA Urges Patching Critical Vulnerability in BeyondTrust Remote SupportCVE-2026-102764
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.