BE
Vendor
Beyondtrust
46
CVEs
11
On KEV
1
New 30D
Products
RS9.9
Remote Support
Remote Access
13 CVEs4 on KEV1 new
PR9.8
Privileged Remote Access (PRA) and Remote Support (RS)
BeyondTrust
2 CVEs2 on KEV0 new
RS9.8
Remote Support(RS) & Privileged Remote Access(PRA)
BeyondTrust
2 CVEs2 on KEV0 new
PM8.8
Privilege Management For Mac
Beyondtrust
2 CVEs1 on KEV0 new
PM7.8
Privilege Management For Unix/linux
Beyondtrust
1 CVEs1 on KEV0 new
RS9.8
Remote Support (RS) and Privileged Remote Access (PRA)
BeyondTrust
1 CVEs1 on KEV0 new
PM8.8
Privilege Management For Windows
Beyondtrust
12 CVEs0 on KEV0 new
BE9.1
Beyondinsight
Beyondtrust
2 CVEs0 on KEV0 new
BP4.9
Beyondinsight Password Safe
Beyondtrust
2 CVEs0 on KEV0 new
UA7.8
U-series Appliance
Beyondtrust
2 CVEs0 on KEV0 new
AB6.1
Appliance Base Software
Beyondtrust
1 CVEs0 on KEV0 new
AD7.5
Avecto Defendpoint
Beyondtrust
1 CVEs0 on KEV0 new
EP7.1
Endpoint Privilege Management (Windows deployment)
BeyondTrust
1 CVEs0 on KEV0 new
EP7.3
Endpoint Privilege Management (Windows deployments)
BeyondTrust
1 CVEs0 on KEV0 new
PM7.5
Privilege Management For Windows And Mac
Beyondtrust
1 CVEs0 on KEV0 new
PR9.9
Privilege Remote Access
BeyondTrust
1 CVEs0 on KEV0 new
PI6.1
Privileged Identity
Beyondtrust
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102764 In wildKEV | RS Remote Support BeyondTrust | 9.8 | Oct 15 | Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support |
| CVE-2026-40145 | EP Endpoint Privilege Management (Windows deployment) BeyondTrust | 7.1 | Aug 17 | Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility |
| CVE-2026-40144 | EP Endpoint Privilege Management (Windows deployments) BeyondTrust | 7.3 | Aug 17 | Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments) |
| CVE-2026-40141 | RS Remote Support BeyondTrust | 9.9 | Jul 6 | High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access |
| CVE-2026-40140 | RS Remote Support BeyondTrust | 7.5 | Jul 6 | High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access |
| CVE-2026-40139 | RS Remote Support BeyondTrust | 9.8 | Jul 6 | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access |
| CVE-2026-40138 | RS Remote Support BeyondTrust | 8.1 | Jul 6 | Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access |
| CVE-2026-1731 RansomwareIn wildKEV | RS Remote Support BeyondTrust | 9.8 | Feb 6 | Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) |
| CVE-2025-6250 | PM Privilege Management For Windows Beyondtrust | 6.7 | Jul 28 | Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections |
| CVE-2025-2297 | PM Privilege Management For Windows Beyondtrust | 7.8 | Jul 28 | Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under… |
| CVE-2025-5309 | RS Remote Support BeyondTrust | 9.8 | Jun 16 | The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code… |
| CVE-2025-0217 | RS Remote Support BeyondTrust | 7.8 | May 5 | BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass |
| CVE-2025-0889 | PM Privilege Management For Windows Beyondtrust | 7.8 | Feb 26 | Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain… |
| CVE-2024-12686 In wildKEV | RS Remote Support BeyondTrust | 7.2 | Dec 18 | Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) |
| CVE-2024-12356 In wildKEV | RS Remote Support BeyondTrust | 9.8 | Dec 17 | Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) |
| CVE-2024-9110 | PI Privileged Identity Beyondtrust | 6.1 | Oct 30 | A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks |
| CVE-2024-5813 | BP Beyondinsight Password Safe Beyondtrust | 4.9 | Jun 11 | A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the… |
| CVE-2024-5812 | BP Beyondinsight Password Safe Beyondtrust | 2.7 | Jun 11 | A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a… |
| CVE-2024-4220 | BE Beyondinsight Beyondtrust | 5.3 | Jun 4 | Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames |
| CVE-2024-4219 | BE Beyondinsight Beyondtrust | 9.1 | Jun 4 | Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forgery vulnerability |
| CVE-2024-4018 | UA U-series Appliance Beyondtrust | 7.8 | Apr 19 | Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (local appliance api modules) allows Privilege Escalation.This issue affects… |
| CVE-2024-4017 | UA U-series Appliance Beyondtrust | 7.8 | Apr 19 | Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (filesystem modules) allows DLL Side-Loading.This issue affects U-Series… |
| CVE-2024-25083 | PM Privilege Management For Windows Beyondtrust | 7.8 | Feb 16 | An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1 |
| CVE-2024-1591 | PM Privilege Management For Windows Beyondtrust | 3.3 | Feb 16 | Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy |
| CVE-2023-49944 | PM Privilege Management For Windows Beyondtrust | 6.7 | Dec 25 | The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared… |
| CVE-2020-28369 | PM Privilege Management For Windows Beyondtrust | 7.8 | Dec 12 | In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp |
| CVE-2020-12614 | PM Privilege Management For Windows Beyondtrust | 7.8 | Dec 12 | An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6 |
| CVE-2020-12612 | PM Privilege Management For Windows Beyondtrust | 7.8 | Dec 12 | An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6 |
| CVE-2020-12615 | PM Privilege Management For Windows Beyondtrust | 7.8 | Dec 12 | An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6 |
| CVE-2021-3187 | PM Privilege Management For Mac Beyondtrust | 8.8 | Dec 11 | An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7 |
| CVE-2020-12613 | PM Privilege Management For Windows Beyondtrust | 8.8 | Dec 11 | An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6 |
| CVE-2023-23632 | RS Remote Support BeyondTrust | 7.8 | Oct 12 | BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass |
| CVE-2023-4310 | RS Remote Support BeyondTrust | 9.8 | Sep 5 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious… |
| CVE-2021-31589 | AB Appliance Base Software Beyondtrust | 6.1 | Jan 5 | A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection… |
| CVE-2021-42254 | PM Privilege Management For Windows Beyondtrust | 7.8 | Nov 19 | BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions |
| CVE-2021-3156 In wildKEV | PM Privilege Management For Mac Beyondtrust | 7.8 | Jan 26 | Sudo Heap-Based Buffer Overflow Vulnerability |
| CVE-2020-9326 | PM Privilege Management For Windows And Mac Beyondtrust | 7.5 | Mar 18 | BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly Avecto Defendpoint) 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1… |
| CVE-2018-10959 | AD Avecto Defendpoint Beyondtrust | 7.5 | Apr 17 | Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic… |
| CVE-2017-5996 | RS Remote Support BeyondTrust | 7.8 | Oct 26 | The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions |