BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API Key

🗓️ 01 Feb 2025 06:40:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 57 Views

BeyondTrust breach affected 17 SaaS customers via compromised API key exploiting zero-day vulnerability.

Reporter	Title	Published	Views	Family All 88
GithubExploit	Exploit for CVE-2026-1731	11 Feb 202609:18	–	githubexploit
GithubExploit	Exploit for CVE-2026-1731	13 Feb 202619:48	–	githubexploit
GithubExploit	Exploit for CVE-2025-1094	18 Jun 202515:18	–	githubexploit
0day.today	BeyondTrust Remote Code Execution Exploit	20 Feb 202500:00	–	zdt
ATTACKERKB	CVE-2026-1731	6 Feb 202621:49	–	attackerkb
ATTACKERKB	CVE-2024-12356	17 Dec 202400:00	–	attackerkb
ATTACKERKB	CVE-2024-12686	18 Dec 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Remote Support remote support tool and the Privileged Remote Access remote access tool lies in the lack of measures to neutralize special elements, allowing attackers to enhance their privileges and execute arbitrary commands.	13 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Remote Support remote support tool and the Privileged Remote Access remote access tool lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to enhance their privileges and execute arbitrary commands.	27 Jan 202500:00	–	bdu_fstec
Tenable Nessus	BeyondTrust Privileged Remote Access (PRA) <= 24.3.1 Multiple Vulnerabilities	2 Jan 202500:00	–	nessus

02 Feb 2025 05:05Current

7.9High risk

Vulners AI Score7.9

CVSS 3.19.8

EPSS0.87991

beyondtrust zero-day breach compromised api key remote support infrastructure api key u.s. treasury department.