BT

Latest CVEs · RSS

• CVE-2026-102764 2026-10-15 · CVSS 9.3
  The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messag
• CVE-2026-40145 2026-08-17 · CVSS 7.1
  A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection control
• CVE-2026-40144 2026-08-17 · CVSS 7.3
  A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2.
• CVE-2026-40141 2026-07-06 · CVSS 8.5
  A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of cert
• CVE-2026-40140 2026-07-06 · CVSS 8.7
  BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insuffi
• CVE-2026-40139 2026-07-06 · CVSS 9.2
  A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests
• CVE-2026-40138 2026-07-06 · CVSS 9.2
  A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validati
• CVE-2026-1731 2026-02-06 · CVSS 9.9
  BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnera
• CVE-2026-1232 2026-02-02 · CVSS 6.8
  A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authentic
• CVE-2025-6250 2025-07-28 · CVSS 7.1
  Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections. Once the se
• CVE-2025-2297 2025-07-28 · CVSS 7.2
  Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user r
• CVE-2025-5309 2025-06-16 · CVSS 8.6
  The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to
• CVE-2025-0217 2025-05-05 · CVSS 7.3
  BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A local authenticated attacker can view the c
• CVE-2025-0889 2025-02-26 · CVSS 7.2
  Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM ob
• CVE-2024-12686 2024-12-18 · CVSS 6.6
  A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privilege
• CVE-2024-12356 2024-12-17 · CVSS 9.8
  A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to i
• CVE-2024-9110 2024-10-30 · CVSS 6.4
  A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks.
• CVE-2024-5812 2024-06-11 · CVSS 3.3
  A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only
• CVE-2024-5813 2024-06-11 · CVSS 5.9
  A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an informat
• CVE-2024-4220 2024-06-04 · CVSS 4.3
  Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.
• CVE-2024-4219 2024-06-04 · CVSS 4.8
  Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forge
• CVE-2024-4017 2024-04-19 · CVSS 8.8
  Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (filesystem modules) allows DLL Side-Loading.This issue affects
• CVE-2024-4018 2024-04-19 · CVSS 8.8
  Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (local appliance api modules) allows Privilege Escalation.This
• CVE-2024-1591 2024-02-16 · CVSS 3.3
  Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy. This allows them