Beyondtrust - vulnerabilities (CVEs)

40 CVEs in 20 products, 1 in the last 30 days, newest from 2026-10-15.

Products

Privilege Management For Windows - 12 CVEs
Privileged Remote Access - 11 CVEs
Remote Support - 11 CVEs
Remote Supportrs Privileged Remote Accesspra - 3 CVEs
Beyondinsight - 2 CVEs
Beyondinsight Password Safe - 2 CVEs
Beyondinsight Passwordsafe - 2 CVEs
Privilege Management For Mac - 2 CVEs
U-series Appliance - 2 CVEs
Appliance Base Software - 1 CVEs
Avecto Defendpoint - 1 CVEs
Endpoint Privilege Management Windows Deployment - 1 CVEs
Endpoint Privilege Management Windows Deployments - 1 CVEs
Privilege Management For Unix/linux - 1 CVEs
Privilege Management For Windows And Mac - 1 CVEs
Privilege Remote Access - 1 CVEs
Privileged Identity - 1 CVEs
Privileged Remote Access Pra - 1 CVEs
Remote Support Privileged Remote Access - 1 CVEs
Remote Support Rs - 1 CVEs

Newest CVEs of Beyondtrust

CVE-2026-102764 - CVSS 9.8 (critical), 2026-10-15: The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the…
CVE-2026-40145 - CVSS 7.1 (high), 2026-08-17: A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection…
CVE-2026-40144 - CVSS 7.3 (high), 2026-08-17: A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version…
CVE-2026-40141 - CVSS 9.9 (critical), 2026-07-06: A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of…
CVE-2026-40140 - CVSS 8.7 (high), 2026-07-06: BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication…
CVE-2026-40139 - CVSS 9.8 (critical), 2026-07-06: A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication…
CVE-2026-40138 - CVSS 9.2 (critical), 2026-07-06: A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper…
CVE-2026-1731 - CVSS 9.9 (critical), 2026-02-06: BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution…
CVE-2026-1232 - CVSS 6.8 (medium), 2026-02-02: A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local…
CVE-2025-2297 - CVSS 7.8 (high), 2025-07-28: Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user…
CVE-2025-6250 - CVSS 7.1 (high), 2025-07-28: Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections. Once the…
CVE-2025-5309 - CVSS 9.8 (critical), 2025-06-16: The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead…
CVE-2025-0217 - CVSS 7.8 (high), 2025-05-05: BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A local authenticated attacker can view the…
CVE-2025-0889 - CVSS 7.8 (high), 2025-02-26: Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM…
CVE-2024-12686 - CVSS 7.2 (high), 2024-12-18: A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative…
CVE-2024-12356 - CVSS 9.8 (critical), 2024-12-17: A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to…
CVE-2024-9110 - CVSS 6.4 (medium), 2024-10-30: A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks.
CVE-2024-5813 - CVSS 5.9 (medium), 2024-06-11: A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an…
CVE-2024-5812 - CVSS 3.3 (low), 2024-06-11: A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite…
CVE-2024-4219 - CVSS 9.1 (critical), 2024-06-04: Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request…
CVE-2024-4220 - CVSS 5.3 (medium), 2024-06-04: Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.
CVE-2024-4018 - CVSS 8.8 (high), 2024-04-19: Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (local appliance api modules) allows Privilege…
CVE-2024-4017 - CVSS 8.8 (high), 2024-04-19: Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (filesystem modules) allows DLL Side-Loading.This issue…
CVE-2024-25083 - CVSS 7.8 (high), 2024-02-16: An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiates a repair, there is an attack vector…
CVE-2024-1591 - CVSS 3.3 (low), 2024-02-16: Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy. This allows…
CVE-2023-49944 - CVSS 6.7 (medium), 2023-12-25: The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by…
CVE-2020-28369 - CVSS 7.8 (high), 2023-12-12: In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable…
CVE-2020-12614 - CVSS 8.4 (high), 2023-12-12: An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher…
CVE-2020-12612 - CVSS 7.8 (high), 2023-12-12: An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevate, it can typically be found within…
CVE-2020-12615 - CVSS 7.8 (high), 2023-12-12: An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs…