Vendor
BeyondTrust vulnerabilities
24 advisories tracked, 3 exploited in the wild according to CISA, 8 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
CVE-2026-1731Remote Support and Privileged Remote Access
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)CVE-2024-12686Remote Support and Privileged Remote Access
Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)CVE-2024-12356Remote Support and Privileged Remote Access
Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
Products covered
Select a product to see only its advisories.
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-40145 | Password Safe and Privilege Management | Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility | HIGH 7.1 | 0.15% | – | |
| CVE-2026-40144 | Password Safe and Privilege Management | Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments) | HIGH 7.3 | 0.13% | – | |
| CVE-2026-40141 | Remote Support and Privileged Remote Access | High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access | HIGH 8.5 | 0.53% | – | |
| CVE-2026-40140 | Remote Support and Privileged Remote Access | High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | HIGH 8.7 | 0.65% | – | |
| CVE-2026-40139 | Remote Support and Privileged Remote Access | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | CRITICAL 9.2 | 0.75% | – | |
| CVE-2026-40138 | Remote Support and Privileged Remote Access | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access | CRITICAL 9.2 | 0.46% | – | |
| CVE-2026-1731Full analysis | Remote Support and Privileged Remote Access | Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | CRITICAL 9.9 | 92% | Yes · ransomware | |
| CVE-2026-1232 | Password Safe and Privilege Management | Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows | MEDIUM 6.8 | 0.14% | – | |
| CVE-2025-6250 | Password Safe and Privilege Management | Privilege Management for Windows - Elevation of Privilege | HIGH 7.1 | 0.16% | – | |
| CVE-2025-2297 | Password Safe and Privilege Management | Privilege Management for Windows - Elevation of Privilege | HIGH 7.2 | 0.13% | – | |
| CVE-2025-5309 | Remote Support and Privileged Remote Access | Remote Support & Privileged Remote Access server side template injection | HIGH 8.6 | 0.95% | – | |
| CVE-2025-0217 | Remote Support and Privileged Remote Access | Privileged Remote Access Authentication Bypass | HIGH 7.3 | 0.19% | – | |
| CVE-2025-0889 | Password Safe and Privilege Management | Privilege Management for Windows – Elevation of Privilege | HIGH 7.2 | 0.20% | – | |
| CVE-2024-12686 | Remote Support and Privileged Remote Access | Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) | MEDIUM 6.6 | 14% | Yes | |
| CVE-2024-12356 | Remote Support and Privileged Remote Access | Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) | CRITICAL 9.8 | 87% | Yes | |
| CVE-2024-9110 | Password Safe and Privilege Management | Cross-Site Scripting In Privileged Identity | MEDIUM 6.4 | 0.24% | – | |
| CVE-2024-5812 | Password Safe and Privilege Management | Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe | LOW 3.3 | 0.27% | – | |
| CVE-2024-5813 | Password Safe and Privilege Management | SSH Private Key Leak in BeyondInsight PasswordSafe | MEDIUM 5.9 | 0.41% | – | |
| CVE-2024-4220 | Password Safe and Privilege Management | Information Disclosure in BeyondInsight | MEDIUM 4.3 | 0.26% | – | |
| CVE-2024-4219 | Password Safe and Privilege Management | SSRF In BeyondInsight | MEDIUM 4.8 | 0.22% | – | |
| CVE-2024-4017 | Remote Support and Privileged Remote Access | Privilege Escalation in U-Series Appliance | HIGH 8.8 | 0.17% | – | |
| CVE-2024-4018 | Remote Support and Privileged Remote Access | Privilege Escalation in U-Series Appliance | HIGH 8.8 | 0.17% | – | |
| CVE-2024-1591 | Password Safe and Privilege Management | Privilege Management for Windows < 24.1 Information Leak | LOW 3.3 | 0.16% | – | |
| CVE-2023-4310 | Remote Support and Privileged Remote Access | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a com… | – | 1.8% | – |
Sources: BeyondTrust security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.