Product by BeyondTrust
BeyondTrust Remote Support
11 known vulnerabilities in BeyondTrust Remote Support (BeyondTrust), 4 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
4
Actively exploited (KEV)
1
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-1731 | BeyondTrust Remote Support (RS) & Privileged Remote Access (PRA): OS Command Injection In CISA KEVRansomwarealso in 2 other products | 9.8 | |
| Critical | CVE-2026-102764 | Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support In CISA KEV | 9.8 | |
| Critical | CVE-2024-12356 | Command Injection Vulnerability in Remote Support (RS) & Privileged Remote Access (PRA) In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2024-12686 | Command Injection vulnerability in Remote Support (RS) & Privilege Remote Access (PRA) In CISA KEValso in 2 other products | 6.6 | |
| Critical | CVE-2023-4310 | BeyondTrust Privileged Remote Access (PRA): Command Injection | 9.8 | |
| Critical | CVE-2026-40139 | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | 9.8 | |
| Critical | CVE-2025-5309 | Remote Support & Privileged Remote Access server side template injection | 9.8 | |
| Critical | CVE-2026-40141 | BeyondTrust Remote Support: Improper Neutralization of Special Elements in Data Query Logic | 9.9 | |
| High | CVE-2026-40140 | BeyondTrust Remote Support: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2026-40138 | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | 8.1 | |
| High | CVE-2017-5996 | BeyondTrust Remote Support: security vulnerability | 7.8 |
News
- Chinese APT Exploited BeyondTrust Vulnerability as Zero-Daysecurityweek,
- BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alertcsoonline,
- NCSC-2026-0437 [1.00] [H/H] Kwetsbaarheid verholpen in BeyondTrust Remote Supportncsc-nl,
- China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Serversthehackernews,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRAthehackernews,