ZeusQA
Start free

Known exploited vulnerabilities

BeyondTrust vulnerabilities attackers have used

Every BeyondTrust vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 4 BeyondTrust vulnerabilities as exploited in the wild, 2 of them added in the last 12 months and 1 used in ransomware campaigns. The most recent is CVE-2026-102764, added Oct 16, 2026. Privileged Remote Access (PRA) and Remote Support (RS) has the most entries (2).

In KEV, all time
4
Added, last 12 months
2
Used in ransomware
1
New CVEs this week
0

By product

Privileged Remote Access (PRA) and Remote Support (RS) (2), Remote Support (1), Remote Support (RS) and Privileged Remote Access (PRA) (1).

Every BeyondTrust entry in CISA KEV

  1. CVE-2026-102764

    Added · due

    BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

    BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.

  2. CVE-2026-1731

    RansomwareAdded · due

    BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

    BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of…

  3. CVE-2024-12686

    Added · due

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful…

  4. CVE-2024-12356

    Added · due

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works