Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

BeyondTrust — Vulnerabilities & Security Advisories 24

Browse all 24 CVE security advisories affecting BeyondTrust. AI-powered Chinese analysis, POCs, and references for each vulnerability.

BeyondTrust provides privileged access management solutions to control and secure administrative credentials across enterprise environments. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation or insecure session management. While no major public security incidents have been widely reported, the 18 CVEs on record highlight ongoing challenges in securing complex privileged access systems. Their security posture emphasizes least privilege principles and credential vaulting, though the attack surface remains significant due to the sensitive nature of administrative functions they manage.

CVE ID Title CVSS Severity Published
CVE-2026-40145 Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility — Endpoint Privilege Management (Windows deployment) CWE-1220 7.1 High 2026-08-17
CVE-2026-40144 Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments) — Endpoint Privilege Management (Windows deployments) CWE-125 7.3 High 2026-08-17
CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access — Remote Support CWE-943 - - 2026-07-06
CVE-2026-40140 High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access — Remote Support CWE-400 - - 2026-07-06
CVE-2026-40139 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access — Remote Support CWE-287 - - 2026-07-06
CVE-2026-40138 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access — Remote Support CWE-287 - - 2026-07-06
CVE-2026-1731 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) — Remote Support(RS) & Privileged Remote Access(PRA) CWE-78 9.8AI Critical AI 2026-02-06
CVE-2026-1232 Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows — Privilege management for Windows CWE-693 6.7AI Medium AI 2026-02-02
CVE-2025-6250 Privilege Management for Windows - Elevation of Privilege — Privilege Management for Windows CWE-424 8.8AI High AI 2025-07-28
CVE-2025-2297 Privilege Management for Windows - Elevation of Privilege — Privilege Management for Windows CWE-268 7.8AI High AI 2025-07-28
CVE-2025-5309 Remote Support & Privileged Remote Access server side template injection — Remote support & Privileged Remote Access CWE-94 8.8AI High AI 2025-06-16
CVE-2025-0217 Privileged Remote Access Authentication Bypass — Privileged Remote Access CWE-287 5.5AI Medium AI 2025-05-05
CVE-2025-0889 Privilege Management for Windows – Elevation of Privilege — Privilege Management for Windows CWE-268 7.0 - 2025-02-26
CVE-2024-12686 Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) — Remote Support(RS) & Privileged Remote Access(PRA) CWE-78 6.6 Medium 2024-12-18
CVE-2024-12356 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) — Remote Support CWE-77 9.8 Critical 2024-12-17
CVE-2024-9110 Cross-Site Scripting In Privileged Identity — Privileged Identity CWE-79 6.4 Medium 2024-10-30
CVE-2024-5812 Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe — BeyondInsight PasswordSafe CWE-290 3.3 Low 2024-06-11
CVE-2024-5813 SSH Private Key Leak in BeyondInsight PasswordSafe — BeyondInsight PasswordSafe CWE-200 5.9 Medium 2024-06-11
CVE-2024-4220 Information Disclosure in BeyondInsight — BeyondInsight CWE-200 4.3 Medium 2024-06-04
CVE-2024-4219 SSRF In BeyondInsight — BeyondInsight CWE-918 4.8 Medium 2024-06-04
CVE-2024-4017 Privilege Escalation in U-Series Appliance — U-Series Appliance CWE-269 8.8 High 2024-04-19
CVE-2024-4018 Privilege Escalation in U-Series Appliance — U-Series Appliance CWE-269 8.8 High 2024-04-19
CVE-2024-1591 Privilege Management for Windows < 24.1 Information Leak — Privilege Management for Windows CWE-200 3.3 Low 2024-02-16
CVE-2023-4310 BeyondTrust Privileged Remote Access 和Remote Support 命令注入漏洞 — Privileged Remote Access (PRA) CWE-77 9.8 - 2023-09-05

This page lists every published CVE security advisory associated with BeyondTrust. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.