Exploited vulnerabilities

BeyondTrust

4 BeyondTrust vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue4
Last 12 months2
In ransomware campaigns1
Last addition16 October 2026

The vulnerabilities4

  1. 16 October 2026CVE-2026-102764Remote SupportBeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
  2. 13 February 2026CVE-2026-1731Remote Support (RS) and Privileged Remote Access (PRA)BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityRansomware
  3. 13 January 2025CVE-2024-12686Privileged Remote Access (PRA) and Remote Support (RS)BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
  4. 19 December 2024CVE-2024-12356Privileged Remote Access (PRA) and Remote Support (RS) BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, BeyondTrust included.

All vendorsThe catalogue on the CISA website