BeyondTrust
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Remote Support | 6 | 2 | Oct 15, 2026 |
| Remote Support(RS) & Privileged Remote Access(PRA) | 3 | 2 | Feb 6, 2026 |
| Privileged Remote Access | 5 | 1 | Jul 6, 2026 |
| Privilege Management for Windows | 5 | – | Feb 2, 2026 |
| U-Series Appliance | 2 | – | Apr 19, 2024 |
| BeyondInsight PasswordSafe | 2 | – | Jun 11, 2024 |
| BeyondInsight | 2 | – | Jun 4, 2024 |
| Privilege Remote Access | 1 | – | Jul 6, 2026 |
| Privileged Remote Access (PRA) | 1 | – | Sep 5, 2023 |
| Endpoint Privilege Management (Windows deployments) | 1 | – | Aug 17, 2026 |
| Remote support & Privileged Remote Access | 1 | – | Jun 16, 2025 |
| Remote Support (RS) | 1 | – | Sep 5, 2023 |
| Endpoint Privilege Management (Windows deployment) | 1 | – | Aug 17, 2026 |
| Privileged Identity | 1 | – | Oct 30, 2024 |
Exploited and recent CVEs
- CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support 78.0%
- CVE-2026-1731 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) 93.9%
- CVE-2024-12686 Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) 32.6%
- CVE-2024-12356 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) 87.4%
- CVE-2024-12356 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) 87.4%
- CVE-2026-40145 Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility 0.2%
- CVE-2026-40144 Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments) 0.1%
- CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access 0.5%
- CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access 0.5%
- CVE-2026-40140 High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access 0.6%
- CVE-2026-40140 High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access 0.6%
- CVE-2026-40139 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access 0.8%
- CVE-2026-40139 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access 0.8%
- CVE-2026-40138 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access 0.5%
- CVE-2026-40138 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access 0.5%
- CVE-2026-1232 Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows 0.1%
- CVE-2025-6250 Privilege Management for Windows - Elevation of Privilege 0.2%
- CVE-2025-2297 Privilege Management for Windows - Elevation of Privilege 0.1%
- CVE-2025-5309 Remote Support & Privileged Remote Access server side template injection 0.9%
- CVE-2025-5309 Remote Support & Privileged Remote Access server side template injection 0.9%
- CVE-2025-0217 Privileged Remote Access Authentication Bypass 0.2%
- CVE-2025-0889 Privilege Management for Windows – Elevation of Privilege 0.2%
- CVE-2024-9110 Cross-Site Scripting In Privileged Identity 0.2%
- CVE-2024-5812 Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe 0.3%
- CVE-2024-5813 SSH Private Key Leak in BeyondInsight PasswordSafe 0.4%
- CVE-2024-4220 Information Disclosure in BeyondInsight 0.3%
- CVE-2024-4219 SSRF In BeyondInsight 0.2%
- CVE-2024-4017 Privilege Escalation in U-Series Appliance 0.2%
- CVE-2024-4018 Privilege Escalation in U-Series Appliance 0.2%
- CVE-2024-1591 Privilege Management for Windows < 24.1 Information Leak 0.2%