Vendor

BeyondTrust

Endpoint Privilege Management (Windows deployment) Endpoint Privilege Management (Windows deployments) Privilege Remote Access Privileged Remote Access Remote Support Remote Support (RS) and Privileged Remote Access (PRA)

Tracked CVEs

CVE-2026-40144 CVE-2026-40145 CVE-2026-40138 CVE-2026-40139 CVE-2026-40140 CVE-2026-40141 CVE-2026-1731KEV

Coverage timeline

BeyondTrust patches CVE-2026-40144/45 in Windows endpoint tool
securityonline.info · Aug 19, 2026
Critical BeyondTrust flaws let attackers bypass authentication
securityonline.info · Jul 6, 2026
Bomgar CVE-2026-1731 Exploited in Supply Chain, LockBit Deployed
www.darkreading.com · Apr 21, 2026
Darktrace calls for unified AI security beyond point fixes
www.darktrace.com · Apr 8, 2026
Storm-1175 Deploys Medusa Ransomware at 'High Velocity'
www.darkreading.com · Apr 7, 2026
China linked Medusa gang uses zero days to hit UK health, finance
thehackernews.com · Apr 7, 2026
CVE-2026-1731 Exposed: VShell and SparkRAT Hit BeyondTrust
securityaffairs.com · Mar 1, 2026
Darktrace warns stolen identities now drive 70% of attacks
www.darktrace.com · Feb 26, 2026
CVE-2026-1731 exploited to seize control of BeyondTrust support
securityaffairs.com · Feb 23, 2026
HHS warns hospitals to patch BeyondTrust as ransomware spreads
databreaches.net · Feb 23, 2026
VShell and SparkRAT Observed in Exploitation of BeyondTrust Critical Vulnerability (CVE-2026-1731)
unit42.paloaltonetworks.com · Feb 19, 2026
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware
thehackernews.com · Feb 16, 2026
Security Affairs newsletter Round 563 by Pierluigi Paganini – INTERNATIONAL EDITION
securityaffairs.com · Feb 15, 2026
Exploited in the Wild: Critical BeyondTrust Flaw (CVSS 9.9) Opens Door to Network Takeover
securityonline.info · Feb 15, 2026
U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog
securityaffairs.com · Feb 14, 2026
2/13/26, 4:35 PM
www.darktrace.com · Feb 13, 2026
Attackers exploit BeyondTrust CVE-2026-1731 within hours of PoC release
securityaffairs.com · Feb 13, 2026
BeyondTrust Vulnerability Targeted by Hackers Within 24 Hours of PoC Release
www.securityweek.com · Feb 13, 2026
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability
thehackernews.com · Feb 13, 2026
BeyondTrust Patches Critical RCE Vulnerability
www.securityweek.com · Feb 10, 2026
BeyondTrust fixes critical pre-auth bug allowing remote code execution
securityaffairs.com · Feb 9, 2026
BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA
thehackernews.com · Feb 9, 2026
CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
securityonline.info · Feb 9, 2026