Skip to content
Noroxi

BeyondTrust records

36 published records for vendor beyondtrust.

Researcher profile

Entered KEV
4 · 11.1%
Weaponized
4 · 11.1%
Pre-auth RCE
4
With a fix record
11.1%
Median publish → KEV
17 days

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

36 records
  • CVE-2026-1731
    96Now

    Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

    CriticalCVSS 9.9KEVWeaponizedEPSS 91%

    beyondtrust · privileged remote accessFeb 6, 2026

  • CVE-2024-12356
    95Now

    Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

    CriticalCVSS 9.8KEVWeaponizedEPSS 87%

    beyondtrust · privileged remote accessDec 17, 2024

  • CVE-2021-3156
    91Now

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root

    HighCVSS 7.8KEVWeaponizedEPSS 100%

    sudo project · sudoJan 26, 2021

  • CVE-2024-12686
    62This week

    Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

    HighCVSS 7.2KEVWeaponizedEPSS 14%

    beyondtrust · privileged remote accessDec 18, 2024

  • CVE-2023-4310
    40Plan

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability whic

    CriticalCVSS 9.8No exploitEPSS 2%

    beyondtrust · privileged remote accessSep 5, 2023

  • CVE-2026-40139
    36Monitor

    Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    CriticalCVSS 9.2No exploitEPSS 1%

    beyondtrust · privileged remote accessJul 6, 2026

  • CVE-2026-40138
    36Monitor

    Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    CriticalCVSS 9.2No exploitEPSS 0%

    beyondtrust · privileged remote accessJul 6, 2026

  • CVE-2024-4219
    36Monitor

    SSRF In BeyondInsight

    CriticalCVSS 9.1No exploitEPSS 0%

    beyondtrust · beyondinsightJun 4, 2024

  • CVE-2020-12613
    35Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    HighCVSS 8.8No exploitEPSS 1%

    beyondtrust · privilege management for windowsDec 11, 2023

  • CVE-2021-3187
    35Monitor

    An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7.

    HighCVSS 8.8No exploitEPSS 1%

    beyondtrust · privilege management for macDec 11, 2023

  • CVE-2025-5309
    34Monitor

    Remote Support & Privileged Remote Access server side template injection

    HighCVSS 8.6No exploitEPSS 1%

    beyondtrust · privileged remote accessJun 16, 2025

  • CVE-2026-40140
    34Monitor

    High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    HighCVSS 8.7No exploitEPSS 1%

    beyondtrust · privileged remote accessJul 6, 2026

  • CVE-2026-40141
    34Monitor

    High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

    HighCVSS 8.5No exploitEPSS 1%

    beyondtrust · privileged remote accessJul 6, 2026

  • CVE-2021-31589
    32Monitor

    A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1

    MediumCVSS 6.1Proof of conceptEPSS 25%

    beyondtrust · appliance base softwareJan 5, 2022

  • CVE-2017-5996
    31Monitor

    The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak

    HighCVSS 7.8No exploitEPSS 1%

    beyondtrust · remote supportOct 26, 2017

  • CVE-2021-42254
    31Monitor

    BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsNov 19, 2021

  • CVE-2020-12612
    31Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 12, 2023

  • CVE-2020-28369
    31Monitor

    In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the use

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 12, 2023

  • CVE-2020-12615
    31Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 12, 2023

  • CVE-2023-23632
    31Monitor

    BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privileged remote accessOct 12, 2023

  • CVE-2024-4017
    31Monitor

    Privilege Escalation in U-Series Appliance

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · u-series applianceApr 19, 2024

  • CVE-2024-4018
    31Monitor

    Privilege Escalation in U-Series Appliance

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · u-series applianceApr 19, 2024

  • CVE-2020-12614
    31Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsDec 12, 2023

  • CVE-2024-25083
    31Monitor

    An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1.

    HighCVSS 7.8No exploitEPSS 0%

    beyondtrust · privilege management for windowsFeb 16, 2024

  • CVE-2018-10959
    30Monitor

    Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environmen

    HighCVSS 7.5No exploitEPSS 2%

    beyondtrust · avecto defendpointApr 17, 2019