Skip to content
Noroxi

BeyondTrust records

37 published records for vendor BeyondTrust. 5 of them have been exploited in the wild (listed in CISA KEV) and 5 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
5 · 13.5%
Weaponized
5 · 13.5%
Pre-auth RCE
4
With a fix record
10.8%
Median publish → KEV
7 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

37 records
  • CVE-2026-1731
    97Now

    Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

    CriticalCVSS 9.9KEVWeaponizedEPSS 93%

    beyondtrust · privileged remote accessFeb 6, 2026

  • CVE-2024-12356
    95Now

    Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

    CriticalCVSS 9.8KEVWeaponizedEPSS 87%

    beyondtrust · privileged remote accessDec 17, 2024

  • CVE-2021-3156
    91Now

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root

    HighCVSS 7.8KEVWeaponizedEPSS 99%

    sudo project · sudoJan 26, 2021

  • CVE-2026-102764
    91Now

    Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

    CriticalCVSS 9.3KEVWeaponizedEPSS 79%

    beyondtrust · remote supportOct 15, 2026

  • CVE-2024-12686
    68This week

    Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

    HighCVSS 7.2KEVWeaponizedEPSS 32%

    beyondtrust · privileged remote accessDec 18, 2024

  • CVE-2023-4310
    40Plan

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability whic

    CriticalCVSS 9.8No exploitEPSS 1%

    beyondtrust · privileged remote accessSep 5, 2023

  • CVE-2026-40139
    36Monitor

    Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    CriticalCVSS 9.2No exploitEPSS 0%

    beyondtrust · privileged remote accessJul 6, 2026

  • CVE-2026-40138
    36Monitor

    Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    CriticalCVSS 9.2No exploitEPSS 0%

    beyondtrust · privileged remote accessJul 6, 2026

  • CVE-2024-4219
    36Monitor

    SSRF In BeyondInsight

    CriticalCVSS 9.1No exploitEPSS 0%

    beyondtrust · beyondinsightJun 4, 2024

  • CVE-2020-12613
    35Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    HighCVSS 8.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 11, 2023

  • CVE-2021-3187
    35Monitor

    An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7.

    HighCVSS 8.8No exploitEPSS 0%

    beyondtrust · privilege management for macDec 11, 2023

  • CVE-2025-5309
    34Monitor

    Remote Support & Privileged Remote Access server side template injection

    HighCVSS 8.6No exploitEPSS 1%

    beyondtrust · privileged remote accessJun 16, 2025

  • CVE-2026-40140
    34Monitor

    High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    HighCVSS 8.7No exploitEPSS 0%

    beyondtrust · privileged remote accessJul 6, 2026

  • CVE-2026-40141
    34Monitor

    High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

    HighCVSS 8.5No exploitEPSS 0%

    beyondtrust · privileged remote accessJul 6, 2026

  • CVE-2021-31589
    32Monitor

    A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1

    MediumCVSS 6.1Proof of conceptEPSS 25%

    beyondtrust · appliance base softwareJan 5, 2022

  • CVE-2017-5996
    31Monitor

    The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak

    HighCVSS 7.8No exploitEPSS 1%

    beyondtrust · remote supportOct 26, 2017

  • CVE-2021-42254
    31Monitor

    BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsNov 19, 2021

  • CVE-2020-12612
    31Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 12, 2023

  • CVE-2020-28369
    31Monitor

    In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the use

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 12, 2023

  • CVE-2020-12615
    31Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 12, 2023

  • CVE-2023-23632
    31Monitor

    BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privileged remote accessOct 12, 2023

  • CVE-2024-4018
    31Monitor

    Privilege Escalation in U-Series Appliance

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · u-series applianceApr 19, 2024

  • CVE-2024-4017
    31Monitor

    Privilege Escalation in U-Series Appliance

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · u-series applianceApr 19, 2024

  • CVE-2020-12614
    31Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 12, 2023

  • CVE-2024-25083
    31Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsFeb 16, 2024