Product by BeyondTrust
BeyondTrust Privileged Remote Access
11 known vulnerabilities in BeyondTrust Privileged Remote Access (BeyondTrust), 3 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
3
Actively exploited (KEV)
1
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-1731 | BeyondTrust Remote Support (RS) & Privileged Remote Access (PRA): OS Command Injection In CISA KEVRansomwarealso in 2 other products | 9.8 | |
| Critical | CVE-2024-12356 | Command Injection Vulnerability in Remote Support (RS) & Privileged Remote Access (PRA) In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2024-12686 | Command Injection vulnerability in Remote Support (RS) & Privilege Remote Access (PRA) In CISA KEValso in 2 other products | 6.6 | |
| Critical | CVE-2023-4310 | BeyondTrust Privileged Remote Access (PRA): Command Injection | 9.8 | |
| Critical | CVE-2026-40139 | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | 9.8 | |
| Critical | CVE-2025-5309 | Remote Support & Privileged Remote Access server side template injection | 9.8 | |
| Critical | CVE-2026-40141 | BeyondTrust Remote Support: Improper Neutralization of Special Elements in Data Query Logic | 9.9 | |
| High | CVE-2026-40140 | BeyondTrust Remote Support: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2026-40138 | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | 8.1 | |
| High | CVE-2025-0217 | Privileged Remote Access Authentication Bypass | 7.8 | |
| High | CVE-2023-23632 | BeyondTrust Privileged Remote Access: Authentication Bypass | 7.8 |
News
- BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alertcsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRAthehackernews,
- BeyondTrust Patches Four Vulnerabilities, Two Criticalsans-newsbites-mail,
- DHS Info Network Hackedsans-newsbites-mail,