BeyondTrust Remote Support vulnerabilities

Latest BeyondTrust Remote Support CVEs

Newest publication first

1. CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

   Published 2026-10-15

   Critical·CVSS 9.3 EPSS 79.5% CISA KEV added 2026-10-16 Exploited in the wild

   The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

2. CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

   Published 2026-07-06

   High·CVSS 8.5 EPSS 0.53%

   A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited pr...

3. CVE-2026-40140 High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

   Published 2026-07-06

   High·CVSS 8.7 EPSS 0.65%

   BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service co...

4. CVE-2026-40139 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

   Published 2026-07-06

   Critical·CVSS 9.2 EPSS 0.75%

   A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, i...

5. CVE-2026-40138 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

   Published 2026-07-06

   Critical·CVSS 9.2 EPSS 0.46%

   A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access...

6. CVE-2026-1731 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

   Published 2026-02-06

   Critical·CVSS 9.9 EPSS 93.9% CISA KEV added 2026-02-13 Ransomware Exploited in the wild Framework module PoC

   BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating syste...

7. CVE-2025-5309 Remote Support & Privileged Remote Access server side template injection

   Published 2025-06-16

   High·CVSS 8.6 EPSS 1.0%

   The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.

8. CVE-2024-12686 Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

   Published 2024-12-18

   High·CVSS 7.2 EPSS 32.6% CISA KEV added 2025-01-13 Exploited in the wild

   A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

9. CVE-2024-12356 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

   Published 2024-12-17

   Critical·CVSS 9.8 EPSS 87.4% CISA KEV added 2024-12-19 Exploited in the wild Framework module

   A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

10. CVE-2023-4310 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Success...

    Published 2023-09-05

    Critical·CVSS 9.8 EPSS 1.8%

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Successful exploitation of this vulnerability can allow an unauthenticated remote attac...

11. CVE-2017-5996 The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions.

    Published 2017-10-26

    High·CVSS 7.8 EPSS 1.3%

    The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.