BeyondTrust vendor intelligence

BeyondTrust Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting BeyondTrust products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
4
Known exploited vulnerabilities affecting BeyondTrust products
In CISA KEV
4
Records also listed in the official catalog
Beyond CISA KEV
0
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
BeyondTrust KEVs with sensor-observed exploitation activity

The catalog gap matters for BeyondTrust exposure

All four exploited BeyondTrust vulnerabilities tracked by Previdian are also listed in CISA KEV. Use product ownership and sensor evidence to prioritize within this portfolio.

100%
Covered by CISA
0%
Beyond CISA
3
Product families

Attested BeyondTrust vulnerabilities

4 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2026-102764

Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

 Remote Support Confirmed In CISA 16 Oct 2026
CVE-2026-1731

Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

 Remote Support(RS) & Privileged Remote Access(PRA) Confirmed In CISA 01 Jun 2026
CVE-2024-12356

Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

 Remote Support, Privileged Remote Access Confirmed In CISA 19 Dec 2024
CVE-2024-12686

Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

 Remote Support(RS) & Privileged Remote Access(PRA) Confirmed In CISA 13 Jan 2025

Showing 4 of 4 on this page (4 BeyondTrust known exploited vulnerabilities).

Recurring weakness patterns

Neutralization, authentication bypass by spoofing, and neutralization account for four mapped occurrences across this BeyondTrust KEV portfolio.

Browse all KEVs →

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

2

CWE-290

Authentication Bypass by Spoofing

1

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

1