Vendor
BeyondTrust
40 known vulnerabilities in products by BeyondTrust, 5 of them actively exploited (CISA KEV).
Key figures
40
Vulnerabilities
5
Actively exploited (KEV)
1
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-1731 | BeyondTrust Remote Support (RS) & Privileged Remote Access (PRA): OS Command Injection In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2026-102764 | Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support In CISA KEV | 9.8 | |
| Critical | CVE-2024-12356 | Command Injection Vulnerability in Remote Support (RS) & Privileged Remote Access (PRA) In CISA KEV | 9.8 | |
| Critical | CVE-2021-3156 | Sudo Heap-Based Buffer Overflow Vulnerability In CISA KEValso in 18 other products | 7.8 | |
| Critical | CVE-2024-12686 | Command Injection vulnerability in Remote Support (RS) & Privilege Remote Access (PRA) In CISA KEV | 6.6 | |
| Medium | CVE-2021-31589 | BeyondTrust Appliance Base Software: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2023-4310 | BeyondTrust Privileged Remote Access (PRA): Command Injection | 9.8 | |
| Critical | CVE-2026-40139 | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | 9.8 | |
| Critical | CVE-2025-5309 | Remote Support & Privileged Remote Access server side template injection | 9.8 | |
| Critical | CVE-2026-40141 | BeyondTrust Remote Support: Improper Neutralization of Special Elements in Data Query Logic | 9.9 | |
| High | CVE-2026-40140 | BeyondTrust Remote Support: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2018-10959 | BeyondTrust Avecto Defendpoint: security vulnerability | 7.5 | |
| Critical | CVE-2026-40138 | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | 8.1 | |
| High | CVE-2017-5996 | BeyondTrust Remote Support: security vulnerability | 7.8 | |
| High | CVE-2020-12613 | BeyondTrust Privilege Management for Windows: security vulnerability | 8.8 | |
| High | CVE-2020-9326 | BeyondTrust Privilege Management For Windows And Mac: security vulnerability | 7.5 | |
| High | CVE-2021-3187 | BeyondTrust Privilege Management For Mac: security vulnerability | 8.8 | |
| High | CVE-2026-40144 | Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments) | — | |
| High | CVE-2026-40145 | BeyondTrust Endpoint Privilege Management (Windows deployment): Insufficient Granularity of Access Control | — | |
| High | CVE-2024-4017 | Privilege Escalation in U-Series Appliance | 8.8 | |
| High | CVE-2024-4018 | Privilege Escalation in U-Series Appliance | 8.8 | |
| High | CVE-2025-2297 | Privilege Management for Windows - Elevation of Privilege | 7.8 | |
| High | CVE-2025-0217 | Privileged Remote Access Authentication Bypass | 7.8 | |
| Medium | CVE-2026-1232 | Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows | — | |
| High | CVE-2025-0889 | Privilege Management for Windows – Elevation of Privilege | 7.8 |
News
- Chinese APT Exploited BeyondTrust Vulnerability as Zero-Daysecurityweek,
- BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alertcsoonline,
- NCSC-2026-0437 [1.00] [H/H] Kwetsbaarheid verholpen in BeyondTrust Remote Supportncsc-nl,
- China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Serversthehackernews,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRAthehackernews,