Login Request a demo
RS
Remote Access
Remote Support
by BeyondTrust · last CVE Oct 15, 2026
On CISA KEVExploited in the wildRansomware-linked
13
CVEs
4
On KEV
9.9
Max CVSS
1
New 30D
Vulnerabilities13In the news6Timeline
Severity mix
Critical 7High 6Medium 0Low 0
Severity
All severities13Critical7High6Medium0Low0
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Remote Support to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102764
In wildKEV
9.8
19%
Oct 15
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
Affected: through 26.2.3
CVE-2026-1731
RansomwareIn wildKEV
9.8
93%
Feb 6
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
Affected: before 25.3.2
CVE-2024-12356
In wildKEV
9.8
87%
Dec 17
Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
Affected: through 24.3.1
CVE-2024-12686
In wildKEV
7.2
32%
Dec 18
Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
Affected: through 24.3.1
CVE-2026-40141
9.9
1%
Jul 6
High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
Affected: through 25.3.2
CVE-2026-40139
9.8
1%
Jul 6
Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
Affected: through 25.3.2
CVE-2025-5309
9.8
1%
Jun 16
The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code…
Affected: 24.2.2 through 24.2.4; 24.3.1 before 24.3.4; 25.1.1
CVE-2023-4310
9.8
2%
Sep 5
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious…
Affected: 23.2.1; 23.2.2
CVE-2026-40138
8.1
0%
Jul 6
Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
Affected: through 25.3.2
CVE-2025-0217
7.8
0%
May 5
BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass
Affected: before 25.1
CVE-2023-23632
7.8
0%
Oct 12
BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass
Affected: 22.2.1 before 22.3.3
CVE-2017-5996
7.8
1%
Oct 26
The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions
Affected: 15.2.1; 15.2.2; 16.1.1; 16.1.2; 16.1.3; 16.1.4; +2 more
CVE-2026-40140
7.5
1%
Jul 6
High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
Affected: through 25.3.2
Showing 13