CyberSIXT Search
Vendor

BeyondTrust

CVEs tracked · all time
8
in CISA KEV · all time
2
articles · since 11 Sep
15
articles · all time
38

15 articles since 11 Sep; 1 CISA notice, marked below the bars.

Show as table
BeyondTrust: articles per day
Day (UTC)Articles
Wed 30 Sep3
Thu 15 Oct1
Fri 16 Oct7
Sat 17 Oct1
Mon 19 Oct3
See the full timeline
Products: Endpoint Privilege Management (Windows deployment), Endpoint Privilege Management (Windows deployments), Privilege Remote Access, Privileged Remote Access and 3 more
Endpoint Privilege Management (Windows deployment)Endpoint Privilege Management (Windows deployments)Privilege Remote AccessPrivileged Remote AccessRemote SupportRemote Support (RS) and Privileged Remote Access (PRA)Remote Support(RS) & Privileged Remote Access(PRA)

CVEs

8 CVEs
CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCVSS9.3CriticalExploited1.2%EPSS12articles
CVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityCVSS9.9CriticalExploited92%EPSS24articles
CVE-2026-40144BeyondTrust Endpoint Privilege Management (Windows deployments) vulnerabilityCVSS7.3High–Not in KEV0.1%EPSS1article
CVE-2026-40145Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utilityCVSS7.1High–Not in KEV0.2%EPSS1article
CVE-2026-40139Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote AccessCVSS9.2Critical–Not in KEV0.8%EPSS1article
CVE-2026-40138Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote AccessCVSS9.2Critical–Not in KEV0.5%EPSS1article
CVE-2026-40140High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote AccessCVSS8.7High–Not in KEV0.7%EPSS1article
CVE-2026-40141High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote AccessCVSS8.5High–Not in KEV0.5%EPSS1article

Coverage

38 articles, all timeFull timeline RSS feed
  1. BeyondTrust Remote Support flaw exploited before disclosure enabled file accessRapid7
  2. Attackers Exploited BeyondTrust Zero Day as Crypto Wallets Were BackdooredThe Hacker News
  3. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress PluginSecurityOnline
  4. CISA Flags Fortinet and BeyondTrust Flaws Under Active AttackSecurity Affairs
  5. China-linked hackers exploited BeyondTrust zero-day to steal credentialsDark Reading
  6. CISA Warns of Exploited BeyondTrust Remote Support Auth BypassCISA · official notice
  7. BeyondTrust Patches Zero-Day Flaw Used to Gain Root AccessSOCRadar
  8. Chinese APT exploited BeyondTrust Remote Support flaw to steal filesSecurityWeek
  9. China-Linked Hackers Exploited BeyondTrust Flaw to Install Root BackdoorInfosecurity
  10. BeyondTrust Patches Remote Access Flaw Exploited to Steal CredentialsSecurityOnline
  11. China Linked Hackers Exploited BeyondTrust Zero Day to Steal CredentialsThe Hacker News
  12. China Linked ARMORY CASTLE Exploited BeyondTrust Flaw as a Zero DayGoogle Cloud
  13. Google Warns N Day Flaws Are Driving a Surge in ExploitationGoogle Cloud
  14. Google Finds AI Discovered Flaws Are Nearly Twice as Likely to Enable RCEInfosecurity
  15. Google Finds AI Discovered Flaws Are More Likely to Enable RCESecurityWeek
  16. BeyondTrust patches CVE-2026-40144/45 in Windows endpoint toolSecurityOnline
  17. Critical BeyondTrust flaws let attackers bypass authenticationSecurityOnline
  18. Bomgar CVE-2026-1731 Exploited in Supply Chain, LockBit DeployedDark Reading
  19. Darktrace calls for unified AI security beyond point fixesDarktrace
  20. Storm-1175 Deploys Medusa Ransomware at 'High Velocity'Dark Reading
  21. China linked Medusa gang uses zero days to hit UK health, financeThe Hacker News
  22. CVE-2026-1731 Exposed: VShell and SparkRAT Hit BeyondTrustSecurity Affairs
  23. Darktrace warns stolen identities now drive 70% of attacksDarktrace
  24. CVE-2026-1731 exploited to seize control of BeyondTrust supportSecurity Affairs
  25. HHS warns hospitals to patch BeyondTrust as ransomware spreadsDataBreaches
  26. VShell and SparkRAT Observed in Exploitation of BeyondTrust Critical Vulnerability (CVE-2026-1731)Unit 42
  27. Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI MalwareThe Hacker News
  28. Security Affairs newsletter Round 563 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs
  29. Exploited in the Wild: Critical BeyondTrust Flaw (CVSS 9.9) Opens Door to Network TakeoverSecurityOnline
  30. U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalogSecurity Affairs
  31. 2/13/26, 4:35 PMDarktrace
  32. Attackers exploit BeyondTrust CVE-2026-1731 within hours of PoC releaseSecurity Affairs
  33. BeyondTrust Vulnerability Targeted by Hackers Within 24 Hours of PoC ReleaseSecurityWeek
  34. Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 VulnerabilityThe Hacker News
  35. BeyondTrust Patches Critical RCE VulnerabilitySecurityWeek
  36. BeyondTrust fixes critical pre-auth bug allowing remote code executionSecurity Affairs
  37. BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRAThe Hacker News
  38. CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCESecurityOnline · first in our coverage

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device