BeyondTrust vulnerabilities
25 CVEs and advisories name BeyondTrust as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-102764Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
- CVE-2026-40145Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility
- CVE-2026-40144Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)
- CVE-2026-40141High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
- CVE-2026-40140High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
- CVE-2026-40139Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
- CVE-2026-40138Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
- CVE-2026-1731Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
- CVE-2026-1232Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows
- CVE-2025-6250Privilege Management for Windows - Elevation of Privilege
- CVE-2025-2297Privilege Management for Windows - Elevation of Privilege
- CVE-2025-5309Remote Support & Privileged Remote Access server side template injection
- CVE-2025-0217Privileged Remote Access Authentication Bypass
- CVE-2025-0889Privilege Management for Windows – Elevation of Privilege
- CVE-2024-12686Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
- CVE-2024-12356Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
- CVE-2024-9110Cross-Site Scripting In Privileged Identity
- CVE-2024-5812Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe
- CVE-2024-5813SSH Private Key Leak in BeyondInsight PasswordSafe
- CVE-2024-4220Information Disclosure in BeyondInsight
- CVE-2024-4219SSRF In BeyondInsight
- CVE-2024-4017Privilege Escalation in U-Series Appliance
- CVE-2024-4018Privilege Escalation in U-Series Appliance
- CVE-2024-1591Privilege Management for Windows < 24.1 Information Leak
- CVE-2023-4310BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability whic