CVE Intelligence

Beyondtrust vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Beyondtrust products: 5 record(s), with severity, exploitation and fixes.

Privileged Remote Access 3Remote Support 3Remote Support(RS) & Privileged Remote Access(PRA) 2Privilege Management For Mac 1Privilege Management For Unix/linux 1Privilege management for Windows 1

Exploited only (KEV) →

CVE-2026-1731 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-78 Feb 6, 2026
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
CVE-2026-1232 Medium · 6.8 CWE-693 Feb 2, 2026
Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows
A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with elevated privileges may be able to bypass the product’s anti-tamper protections, which could allow access to protected application components and the ability to modify product configuration.
CVE-2024-12686 High · 7.2 KEV High · 55 CWE-78 Dec 18, 2024
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CVE-2024-12356 Critical · 9.8 KEV Urgent · 81 Public exploit CWE-77 Dec 17, 2024
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
CVE-2021-3156 High · 7.8 KEV Urgent · 76 Public exploit CWE-193 Jan 26, 2021
Sudo Heap-Based Buffer Overflow Vulnerability
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.