beyondtrust-rce-scanner

CVE-2026-1731 — RCE pre-autenticación en BeyondTrust Remote Support y PRA Descripción general RCE crítico de pre-autenticación en BeyondTrust Remote Support y Privileged Remote Access. Un atacante remoto no autenticado puede ejecutar comandos del sistema operativo...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support PoC de RCE pre-autenticación !WARNING Este script está destinado únicamente a fines educativos y de investigación. No lo utilices contra sistemas sin permiso explícito. El acceso o las pruebas no autorizados son ilegales y poco éticos. Lee el DESCARGO DE...

SimpleHelp <= 5.5.7 - Privilege Escalation

SimpleHelp remote support software v5.5.7 and before contains a privilege escalation caused by insufficient access controls in API key creation, letting low-privileges technicians escalate privileges to server admin, exploit requires low-privileges technician access. id: CVE-2024-57726 info: name...

CVE-2026-1731

Escáner BeyondTrust CVE-2026-1731 Escáner profesional en Python para detectar la exposición de BeyondTrust Remote Support / Privileged Remote Access. Desarrollador: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — Vulnerabilidad de ejecución remota de código en BeyondTrust...

CVE-2026-1731

PoC de RCE ciega CVE-2026-1731 Versiones afectadas: Privileged Remote Access : = 24.3.4 Remote Support : = 25.3.1 Para más información, te recomiendo leer el análisis de attackerkb.com. Cómo compilar Necesitarás las siguientes herramientas para compilar este PoC: Git, rust 1. Clona mi repositorio...

CVE-2024-12356

Ejecución Remota de Código No Autenticada en BeyondTrust Remote Support y Privileged Remote Access mediante Inyección de Argumentos y una Omisión del Escape de Cadenas de PostgreSQL Advertencia Ética: Solo para fines de investigación, educativos y de pruebas autorizadas. No lo utilice contra...

CVE-2019-3980

CVE-2019-3980 Explotación de CVE-2019-3980 escrita en win32/c++ dependencia de openssl. Puerto de https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instrucciones Este PoC requiere bibliotecas openssl enlazadas estáticamente. Coloca los includes de openssl en...

CVE-2026-1731

BeyondTrust CVE-2026-1731 Scanner Professional Python scanner for detecting BeyondTrust Remote Support / Privileged Remote Access exposure. Developer: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability CVE-2026-1731 is a critical...

CVE-2026-5846

The CVE-2026-5846 entry concerns Watchfire Controller Software, where self-signed hard-coded RSA private keys and X.509 certificates are embedded in plaintext in the firmware patch binaries from Watchfire’s Remote Support filestore. This exposes TLS/HTTPS authentication and encryption for the con...

CVE-2026-5846

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the...

CVE-2026-5846: Use of Hard-coded Cryptographic Key

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the...

Vulnerabilities found in BeyondTrust Remote Support and Privileged Remote Access

BeyondTrust has identified vulnerabilities in the products Remote Support and Privileged Remote Access. These vulnerabilities involve multiple aspects of these products. There is a pre-authentication vulnerability that allows a network-based attacker to bypass authentication checks without prior...

BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-11)

The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by a command injection vulnerability. - All BeyondTrust Remote Support RS versions contain a command injection vulnerability that can be exploited by a user...

BeyondTrust Remote Support (RS) < 25.3.3 Multiple Vulnerabilities (BT26-03)

The version of BeyondTrust Remote Support RS running on the remote host is prior to 25.3.3. It is, therefore, affected by multiple vulnerabilities, including: - A critical pre-authentication vulnerability in the authentication subsystem. Improper validation of authentication data may allow a...

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

BeyondTrust has released updates to address two critical security flaws affecting Remote Support RS and Privileged Remote Access PRA products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices. The vulnerabilities are listed below -...

CVE-2026-40138

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance...

CVE-2026-40139

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, including accounts...

CVE-2026-40141

CVE-2026-40141 affects the web application component of BeyondTrust Remote Support and Privileged Remote Access. The issue stems from insufficient validation of user-supplied input, which could allow an authenticated attacker with limited privileges to access resources or data beyond their author...

EUVD-2026-41889

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to acces...

CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to acces...