What’s Vulnerable › Products

BeyondTrust Privileged Remote Access vulnerabilities

11 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your BeyondTrust Privileged Remote Access version is affected

Exploited BeyondTrust Privileged Remote Access vulnerabilities

• CVE-2026-1731 — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
• CVE-2024-12686 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
• CVE-2024-12356 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

Latest BeyondTrust Privileged Remote Access vulnerabilities

• CVE-2026-40141 — High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access (CVSS 9.9)
• CVE-2026-40140 — High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 7.5)
• CVE-2026-40139 — Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 9.8)
• CVE-2026-40138 — Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 8.1)
• CVE-2026-1731 — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2025-5309 — Remote Support & Privileged Remote Access server side template injection (CVSS 9.8)
• CVE-2025-0217 — Privileged Remote Access Authentication Bypass (CVSS 7.8)
• CVE-2024-12686 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability (CVSS 7.2) — exploited
• CVE-2024-12356 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2023-23632 — (CVSS 7.8)
• CVE-2023-4310 — (CVSS 9.8)