BeyondTrust Remote Support vulnerabilities

11 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Exploited BeyondTrust Remote Support vulnerabilities

CVE-2026-102764 — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
CVE-2026-1731 — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
CVE-2024-12686 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
CVE-2024-12356 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2026-102764 — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability (CVSS 9.8) — exploited
CVE-2026-40141 — High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access (CVSS 9.9)
CVE-2026-40140 — High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 7.5)
CVE-2026-40139 — Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 9.8)
CVE-2026-40138 — Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (CVSS 8.1)
CVE-2026-1731 — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability (CVSS 9.8) — exploited
CVE-2025-5309 — Remote Support & Privileged Remote Access server side template injection (CVSS 9.8)
CVE-2024-12686 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability (CVSS 7.2) — exploited
CVE-2024-12356 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability (CVSS 9.8) — exploited
CVE-2023-4310 — (CVSS 9.8)
CVE-2017-5996 — (CVSS 7.8)