BeyondTrust

This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days

• Weekly Recap

This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days

Do Son October 19, 2026 0

Our weekly CVE report for Oct 12-18, 2026 tracks 5,499 new flaws and 12 exploited vulnerabilities, with CISA KEV trailing by up to 8 days.

Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE

• Vulnerability Report

Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE

Do Son October 16, 2026 0

Patch CVE-2026-102764 now. This critical BeyondTrust Remote Support vulnerability is exploited in the wild as an ARMORY CASTLE zero-day.

BeyondTrust EPM Flaws Allow Windows Privilege Escalation

• Vulnerability Report

BeyondTrust EPM Flaws Allow Windows Privilege Escalation

Do Son August 19, 2026 0

BeyondTrust patched two high-severity EPM flaws (CVE-2026-40144, CVE-2026-40145) allowing local privilege escalation on Windows. Update to 26.1.2.

CVE-2026-40138 & CVE-2026-40139: BeyondTrust Pre-Auth Flaws (CVSS 9.2)

• Vulnerability Report

CVE-2026-40138 & CVE-2026-40139: BeyondTrust Pre-Auth Flaws (CVSS 9.2)

Do Son July 6, 2026 0

BeyondTrust patched two critical pre-authentication vulnerabilities (CVE-2026-40138, CVE-2026-40139, CVE-2026-40140). Update Remote Support instances now.

Hackers Exploit Critical BeyondTrust Flaw to Deploy VShell and SparkRAT Across Multiple Sectors

• Malware
• Vulnerability Report

Hackers Exploit Critical BeyondTrust Flaw to Deploy VShell and SparkRAT Across Multiple Sectors

Do Son February 23, 2026 0

Unit 42 warns of active attacks on critical BeyondTrust flaw CVE-2026-1731. Hackers bypass auth for RCE and data theft. Patch self-hosted instances now.

Exploited in the Wild: Critical BeyondTrust Flaw (CVSS 9.9) Opens Door to Network Takeover

• Vulnerability Report

Exploited in the Wild: Critical BeyondTrust Flaw (CVSS 9.9) Opens Door to Network Takeover

Do Son February 15, 2026 0

Arctic Wolf warns of CVE-2026-1731, a critical BeyondTrust flaw exploited in the wild. Attackers use it to deploy backdoors. Patch self-hosted instances now.

CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE

• Vulnerability Report

CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE

Do Son February 9, 2026 0

Critical BeyondTrust flaw CVE-2026-1731 (CVSS 9.9) allows unauthenticated RCE on Remote Support & PRA appliances. Update to v25.3.2 immediately.

BeyondTrust Privilege Management for Windows: Two High-Severity Flaws Allow Local Privilege Escalation

• Vulnerability Report

BeyondTrust Privilege Management for Windows: Two High-Severity Flaws Allow Local Privilege Escalation

Do Son July 30, 2025 0

BeyondTrust patches two high-severity LPE flaws (CVE-2025-2297, CVE-2025-6250) in Privilege Management for Windows, allowing local attackers to gain SYSTEM privileges via user profile manipulation and WMIC exploit.

Unauthenticated RCE in BeyondTrust Tools: Chat Feature Opens Door to Server Takeover

• Vulnerability

Unauthenticated RCE in BeyondTrust Tools: Chat Feature Opens Door to Server Takeover

Do Son June 17, 2025 0

BeyondTrust warns of a high-severity unauthenticated RCE flaw in Remote Support and PRA, exploitable via the built-in chat feature. Patch immediately

BeyondTrust PRA Vulnerability (CVE-2025-0217) Enables Session Hijacking via Authentication Bypass

• Vulnerability

BeyondTrust PRA Vulnerability (CVE-2025-0217) Enables Session Hijacking via Authentication Bypass

Do Son May 5, 2025 0

CVE-2025-0217 flaw in BeyondTrust PRA allows session hijacking via local auth bypass. Upgrade to version 25.1+ to prevent exploitation.

BeyondTrust Privilege Management for Windows Vulnerability Allows Local Privilege Escalation

• Vulnerability

BeyondTrust Privilege Management for Windows Vulnerability Allows Local Privilege Escalation

Do Son February 28, 2025 0

CVE-2025-0889 poses a serious risk. Discover how this vulnerability affects BeyondTrust Privilege Management for Windows solutions.

CISA Warns of Active Exploitation of Critical Flaws in BeyondTrust and Qlik Sense

• Vulnerability

CISA Warns of Active Exploitation of Critical Flaws in BeyondTrust and Qlik Sense

Do Son January 13, 2025 0

Urgent warning: Critical security vulnerabilities CVE-2024-12686 pose significant risks. BeyondTrust and Qlik Sense Enterprise impacted.

CVE-2024-12356 (CVSS 9.8): Critical Vulnerability in BeyondTrust PRA and RS Enables Remote Code Execution

• Vulnerability

CVE-2024-12356 (CVSS 9.8): Critical Vulnerability in BeyondTrust PRA and RS Enables Remote Code Execution

Do Son December 18, 2024 0

Protect your organization from critical command injection vulnerability CVE-2024-12356 in BeyondTrust’s Privileged Remote Access and Remote Support solutions.