BeyondTrust vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202410
3. 20255
4. 20269

Known exploitedNewest addition to KEV first

• CVE-2026-102764

  Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

  BeyondTrust · Remote Support

  ExploitedCritical9.3
• CVE-2026-1731

  Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

  BeyondTrust · Remote Support(RS) & Privileged Remote Access(PRA)

  ExploitedCritical9.9
• CVE-2024-12686

  Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

  BeyondTrust · Remote Support(RS) & Privileged Remote Access(PRA)

  ExploitedMedium6.6
• CVE-2024-12356

  Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

  BeyondTrust · Remote Support

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-102764

  Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

  BeyondTrust · Remote Support

  ExploitedCritical9.3
• CVE-2026-40145

  Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility

  BeyondTrust · Endpoint Privilege Management (Windows deployment)

  High7.1
• CVE-2026-40144

  Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)

  BeyondTrust · Endpoint Privilege Management (Windows deployments)

  High7.3
• CVE-2026-40141

  High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

  BeyondTrust · Remote Support

  High8.5
• CVE-2026-40140

  High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

  BeyondTrust · Remote Support

  High8.7
• CVE-2026-40139

  Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

  BeyondTrust · Remote Support

  Critical9.2
• CVE-2026-40138

  Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

  BeyondTrust · Remote Support

  Critical9.2
• CVE-2026-1731

  Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

  BeyondTrust · Remote Support(RS) & Privileged Remote Access(PRA)

  ExploitedCritical9.9
• CVE-2026-1232

  Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows

  BeyondTrust · Privilege management for Windows

  Medium6.8
• CVE-2025-6250

  Privilege Management for Windows - Elevation of Privilege

  BeyondTrust · Privilege Management for Windows

  High7.1