BeyondTrust — known exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalog (KEV) lists vulnerabilities that CISA has confirmed are being exploited in the wild; U.S. federal civilian agencies are required to remediate each entry by its due date. This page joins the KEV entries for BeyondTrust with NVD CVSS scores and CISA's ransomware-campaign flag. See our methodology or browse all CVEs.
Key findings
CISA's Known Exploited Vulnerabilities catalog lists 3 BeyondTrust vulnerabilities confirmed as exploited in the wild across 3 products; 1 of them (33%) is flagged as used in known ransomware campaigns. Remote Support (RS) and Privileged Remote Access (PRA), Privileged Remote Access (PRA) and Remote Support (RS) and Privileged Remote Access (PRA) and Remote Support (RS) are tied as the most-affected products, with 1 entry each (33% of the total each). CISA added 1 entry in 2026 so far, compared with 1 in 2025. Across the 3 entries with an NVD CVSS score (100% of the total), the average score is 8.7; 2 entries are rated critical by NVD. The most recent addition is CVE-2026-1731 (BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability), added on 2026-02-13.
Affected products
| Product | Entries | Share |
|---|---|---|
| Remote Support (RS) and Privileged Remote Access (PRA) | 1 | 33% |
| Privileged Remote Access (PRA) and Remote Support (RS) | 1 | 33% |
| Privileged Remote Access (PRA) and Remote Support (RS) | 1 | 33% |
Entries added per year
By date added to the KEV catalog
Exploited BeyondTrust vulnerabilities (3)
Newest first. CVSS scores from NVD where available.
| CVE | Product | Vulnerability | Date added | Ransomware | CVSS |
|---|---|---|---|---|---|
| CVE-2026-1731 | Remote Support (RS) and Privileged Remote Access (PRA) | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 2026-02-13 | Known | CRITICAL9.8 |
| CVE-2024-12686 | Privileged Remote Access (PRA) and Remote Support (RS) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability | 2025-01-13 | — | MEDIUM6.6 |
| CVE-2024-12356 | Privileged Remote Access (PRA) and Remote Support (RS) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | 2024-12-19 | — | CRITICAL9.8 |
Source: CISA Known Exploited Vulnerabilities catalog, joined with NIST NVD CVSS data. Vendor names are normalized across spellings. Compare all vendors.