Skip to content
English

Products › Brands

Brand

BeyondTrust: actively exploited vulnerabilities

3 vulnerabilities in BeyondTrust products (Remote Support / Privileged Remote Access (RS / PRA)) are in CISA’s catalog of exploited vulnerabilities. Last added: February 13, 2026.

By category

Add just one BeyondTrust category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Remote Support / Privileged Remote Access (RS / PRA) 3 vulnerabilities · Remote management (RMM)

Name used by CISA: BeyondTrust. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this BeyondTrust list.

  1. Rank 1BeyondTrust Remote Support / Privileged Remote Access (RS / PRA)

    CVE-2026-1731

    Ransomware

    BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 13, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)
  2. Rank 2BeyondTrust Remote Support / Privileged Remote Access (RS / PRA)

    CVE-2024-12356

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 19, 2024
    CISA deadline
    8 days
    CVSS severity
    9.8 (critical)
  3. Rank 3BeyondTrust Remote Support / Privileged Remote Access (RS / PRA)

    CVE-2024-12686

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 13, 2025
    CISA deadline
    21 days
    CVSS severity
    7.2 (high)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.