CVE Intelligence
Início / CVEs

Vulnerabilidades exploradas (CISA KEV)

CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.

Severidade
Limpar

5 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2026-102764 Crítica · 9.8 KEV Alta · 55 CWE-290 15/10/2026
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
CVE-2026-1731 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-78 06/02/2026
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
CVE-2024-12686 Alta · 7.2 KEV Alta · 55 CWE-78 18/12/2024
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CVE-2024-12356 Crítica · 9.8 KEV Urgente · 81 Exploit público CWE-77 17/12/2024
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
CVE-2021-3156 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-193 26/01/2021
Sudo Heap-Based Buffer Overflow Vulnerability
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.