Privileged access management
BeyondTrust advisories: every record the registers tie to its products
In one line
12 advisories are attributed to BeyondTrust products in this record, covering December 2024 to July 2026, and 1 of them appears in the CISA catalogue of known exploited vulnerabilities. A further 24 register entries mention BeyondTrust without naming one of its products as affected, and are excluded rather than counted. Each entry below links to the register that published it.
Attributed
12
tied to a named product
Known exploited
1
in the CISA catalogue
Rated critical
6
by the register
Last checked
Jul 28, 2026
sources re-queried
Why this list is shorter than a CVE mirror
The registers are searched by keyword, so a search for a company name returns advisories that merely mention it. A mirror publishes those. This page does not: an entry appears only when the register itself ties it to a product of BeyondTrust, through a reference on the vendor's own domain, the vendor named as the assigning authority, or the affected product list naming it.
24 entries did not clear that bar and are not shown. That is the difference, and it is deliberate: a page that lists another company's vulnerability under this heading is wrong in the way that matters most.
12 of the 12 records carry a CVSS base score from the register. Where none is published, none is shown, and no score is estimated.
The full list, most recently exploited and most recent first
Records held by several registers are folded into one entry with a link to each, so the same vulnerability is not counted twice. Entries listed in the CISA catalogue of known exploited vulnerabilities are shown first, because that is the one flag on this page that changes what a reader should do next.
- CVE-2026-1731criticalCVSS 9.8Known exploitedFeb 13, 2026
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
- WID-SEC-2026-2215highCVSS 8.1Jul 08, 2026
Affected products: BeyondTrust Remote Support, BeyondTrust Privileged Remote Access
- CVE-2026-40141criticalCVSS 9.9Jul 06, 2026
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters.
- CVE-2026-40140highCVSS 7.5Jul 06, 2026
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem.
- CVE-2026-40139criticalCVSS 9.8Jul 06, 2026
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support.
- CVE-2026-40138criticalCVSS 8.1Jul 06, 2026
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access.
- WID-SEC-2026-0331criticalCVSS 10.0Feb 26, 2026
Affected products: BeyondTrust Privileged Remote Access, BeyondTrust Remote Support
- CVE-2026-1232mediumCVSS 6.8Feb 02, 2026
A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7.
- WID-SEC-2025-1331highCVSS 8.8Jun 17, 2025
Affected products: BeyondTrust Remote Support, BeyondTrust Privileged Remote Access
- WID-SEC-2025-0940mediumCVSS 7.5May 06, 2025
Affected products: BeyondTrust Privileged Remote Access
- WID-SEC-2024-3726mediumCVSS 6.6Jan 14, 2025
Affected products: BeyondTrust Privileged Remote Access, BeyondTrust Remote Support
- WID-SEC-2024-3723criticalCVSS 9.8Dec 20, 2024
Affected products: BeyondTrust Privileged Remote Access, BeyondTrust Remote Support
Which registers contributed
| Register | Operated by | Entries | Latest |
|---|---|---|---|
| European Vulnerability Database | ENISA, European Union | 29 | Jul 06, 2026 |
| National Vulnerability Database | NIST, United States Department of Commerce | 7 | Jul 06, 2026 |
| CERT-Bund security advisories | BSI, Federal Republic of Germany | 6 | Jul 08, 2026 |
| Known Exploited Vulnerabilities catalogue | CISA, United States | 1 | Feb 13, 2026 |
The entry counts here are the raw register totals for BeyondTrust, before attribution. They are larger than the list above for exactly that reason.
Questions this page answers
How many vulnerabilities does BeyondTrust have?
12 advisories in this record are tied by a register to a product of BeyondTrust. That is not the same as the number of vulnerabilities the products contain, and no public source knows that number. It is the count of what has been found, disclosed and published, which depends on how much the products are examined and how openly the vendor discloses.
Are any BeyondTrust vulnerabilities being actively exploited?
1 of the 12 records here appears in the CISA catalogue of known exploited vulnerabilities, which lists flaws with confirmed exploitation in the wild. They are shown first in the list above. Whether any of them affects your deployment depends on the versions and components you run.
Why does this page show fewer CVEs for BeyondTrust than other sites?
Because a keyword search for a company name returns advisories about other companies' products that mention it in passing, and this page excludes those. 24 register entries name BeyondTrust without naming one of its products as affected. A mirror that lists them produces a longer page and a wrong number.
Where do the BeyondTrust advisories on this page come from?
From European Vulnerability Database (ENISA, European Union); National Vulnerability Database (NIST, United States Department of Commerce); CERT-Bund security advisories (BSI, Federal Republic of Germany); Known Exploited Vulnerabilities catalogue (CISA, United States). Every entry links back to the register that published it, and carries the date that register states. Where the same vulnerability is held by several registers it is shown once with a link to each, rather than counted twice.
Does a long advisory list mean BeyondTrust is insecure?
No. A register records what researchers found and what the vendor disclosed, so a widely deployed product with a working disclosure process accumulates more entries than one nobody examines. A short list can equally mean a small install base or a vendor that publishes little. This page reports the record and does not rate the vendor, because whether this is acceptable depends on your risk appetite, your compliance scope and the alternatives you are weighing.
A list of advisories is not a risk assessment
What matters is which of these touch the components you actually run, in the configuration you actually run them in, and whether that is acceptable next to the alternatives on your shortlist. DecisionOS reads the same pool against the criteria of a real decision and produces a memo that holds up in front of a board and an auditor.
The full BeyondTrust record, including sources and open questions