# cve.now: BeyondTrust

The newest entries naming BeyondTrust as an affected vendor (up to 200), of 25 in all, 4 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-102764](https://cve.now/CVE-2026-102764.md): Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support (CVSS 9.3, KEV)
- [CVE-2026-40145](https://cve.now/CVE-2026-40145.md): Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility (CVSS 7.1)
- [CVE-2026-40144](https://cve.now/CVE-2026-40144.md): Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments) (CVSS 7.3)
- [CVE-2026-40141](https://cve.now/CVE-2026-40141.md): High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access (CVSS 8.5)
- [CVE-2026-40140](https://cve.now/CVE-2026-40140.md): High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 8.7)
- [CVE-2026-40139](https://cve.now/CVE-2026-40139.md): Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 9.2)
- [CVE-2026-40138](https://cve.now/CVE-2026-40138.md): Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 9.2)
- [CVE-2026-1731](https://cve.now/CVE-2026-1731.md): Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) (CVSS 9.9, KEV)
- [CVE-2026-1232](https://cve.now/CVE-2026-1232.md): Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows (CVSS 6.8)
- [CVE-2025-6250](https://cve.now/CVE-2025-6250.md): Privilege Management for Windows - Elevation of Privilege (CVSS 7.1)
- [CVE-2025-2297](https://cve.now/CVE-2025-2297.md): Privilege Management for Windows - Elevation of Privilege (CVSS 7.2)
- [CVE-2025-5309](https://cve.now/CVE-2025-5309.md): Remote Support & Privileged Remote Access server side template injection (CVSS 8.6)
- [CVE-2025-0217](https://cve.now/CVE-2025-0217.md): Privileged Remote Access Authentication Bypass (CVSS 7.3)
- [CVE-2025-0889](https://cve.now/CVE-2025-0889.md): Privilege Management for Windows – Elevation of Privilege (CVSS 7.2)
- [CVE-2024-12686](https://cve.now/CVE-2024-12686.md): Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) (CVSS 6.6, KEV)
- [CVE-2024-12356](https://cve.now/CVE-2024-12356.md): Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) (CVSS 9.8, KEV)
- [CVE-2024-9110](https://cve.now/CVE-2024-9110.md): Cross-Site Scripting In Privileged Identity (CVSS 6.4)
- [CVE-2024-5812](https://cve.now/CVE-2024-5812.md): Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe (CVSS 3.3)
- [CVE-2024-5813](https://cve.now/CVE-2024-5813.md): SSH Private Key Leak in BeyondInsight PasswordSafe (CVSS 5.9)
- [CVE-2024-4220](https://cve.now/CVE-2024-4220.md): Information Disclosure in BeyondInsight (CVSS 4.3)
- [CVE-2024-4219](https://cve.now/CVE-2024-4219.md): SSRF In BeyondInsight (CVSS 4.8)
- [CVE-2024-4017](https://cve.now/CVE-2024-4017.md): Privilege Escalation in U-Series Appliance (CVSS 8.8)
- [CVE-2024-4018](https://cve.now/CVE-2024-4018.md): Privilege Escalation in U-Series Appliance (CVSS 8.8)
- [CVE-2024-1591](https://cve.now/CVE-2024-1591.md): Privilege Management for Windows \< 24.1 Information Leak (CVSS 3.3)
- [CVE-2023-4310](https://cve.now/CVE-2023-4310.md): BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability whic (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/beyondtrust
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.