433 matches found
PT-2026-55951
Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support affected versions not specified Description A critical pre-authentication flaw exists in the authentication subsystem. Improper processing of authentication requests allows an unauthenticated remote attacker to bypas...
PT-2026-55950
Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support and Privileged Remote Access versions prior to 26.2.1 BeyondTrust Remote Support and Privileged Remote Access versions prior to 25.3.3 Description A critical pre-authentication flaw exists in the authentication...
PT-2026-55953
Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support and Privileged Remote Access affected versions not specified Description A high-severity issue exists in a web application component due to insufficient validation of user-supplied input. This flaw allows an...
CVE-2026-40141: Improper Neutralization of Special Elements in Data Query Logic
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to acces...
PT-2026-55952
Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support and Privileged Remote Access affected versions not specified Description A pre-authentication issue exists in the network communication subsystem. Insufficient validation of client-supplied input allows an...
CVE-2026-40139: Improper Authentication
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, including accounts...
CVE-2026-40140: Uncontrolled Resource Consumption
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting...
Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access
CVE-2026-1731 — BeyondTrust Remote Support & PRA Pre-auth RCE...
Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook
In this article 1. Risk to enterprise environments 2. Attack chain overview 1. Stage 1: Initial contact via Teams T1566.003 Spearphishing via Service 2. Stage 2: Remote assistance foothold 3. Stage 3: Interactive reconnaissance and access validation 4. Stage 4: Payload placement and trusted...
Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access
BeyondTrust CVE-2026-1731 PoC Overview A Python-based sec...
The vulnerability of the BeyondTrust Remote Support remote support tool and the BeyondTrust Privileged Remote Access remote access tool lies in the lack of measures taken to neutralize special elements used in the operating system command line. This allows attackers to execute arbitrary code.
The vulnerability of the BeyondTrust Remote Support remote support tool and the BeyondTrust Privileged Remote Access remote access tool is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a...
BeyondTrust RS 25.3.1 PRA/RS Mass Scanner
This Metasploit module is a safe auxiliary scanner for the Metasploit Framework designed to identify potentially vulnerable deployments of BeyondTrust Privileged Remote Access and BeyondTrust Remote Support that are susceptible to CVE-2026-1731...
Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access
BeyondTrust CVE-2026-1731 Scanner Professional Python scanner...
BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration
Threat actors have been observed exploiting a recently disclosed critical security flaw impacting BeyondTrust Remote Support RS and Privileged Remote Access PRA products to conduct a wide range of malicious actions, including deploying VShell and Spark RAT. The vulnerability, tracked as...
Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access
CVE-2026-1731 Blind RCE PoC Effected Versions: - Privi...
📄 BeyondTrust Remote Support / Privileged Remote Access Remote Code Execution
A critical pre‑authentication remote code execution vulnerability identified as CVE-2026-1731 affects products from BeyondTrust, specifically Remote Support and Privileged Remote Access. The vulnerability allows an unauthenticated attacker to execute arbitrary commands on a vulnerable system by...
Vulnerability fixed in BeyondTrust Remote Support
BeyondTrust has fixed a vulnerability in BeyondTrust Remote Support and some older versions of Privileged Remote Access. The vulnerability is in the software's pre-authentication, which allows unauthenticated attackers to execute operating system commands by sending specially crafted requests to...
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability
Threat actors have started to exploit a recently disclosed critical security flaw impacting BeyondTrust Remote Support RS and Privileged Remote Access PRA products, according to watchTowr. "Overnight we observed first in-the-wild exploitation of BeyondTrust across our global sensors," Ryan...
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
BeyondTrust Remote Support RS and Privileged Remote Access PRAcontain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no...