Vulnerabilidades de Beyondtrust
CVEs publicadas que afetam produtos de Beyondtrust: 5 registro(s), com severidade, exploração e correções.
Privileged Remote Access 3Remote Support 3Remote Support(RS) & Privileged Remote Access(PRA) 2Privilege Management For Mac 1Privilege Management For Unix/linux 1Privilege management for Windows 1
CVE-2026-1731
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-78 06/02/2026
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
CVE-2026-1232
Média · 6.8
CWE-693 02/02/2026
Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows
A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with elevated privileges may be able to bypass the product’s anti-tamper protections, which could allow access to protected application components and the ability to modify product configuration.
CVE-2024-12686
Alta · 7.2
KEV Alta · 55 CWE-78 18/12/2024
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CVE-2024-12356
Crítica · 9.8
KEV Urgente · 81 Exploit público CWE-77 17/12/2024
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
CVE-2021-3156
Alta · 7.8
KEV Urgente · 76 Exploit público CWE-193 26/01/2021
Sudo Heap-Based Buffer Overflow Vulnerability
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.