B
Vendor security profile3 actively exploited CVEs
beyondtrust
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical2
CISA KEV3
Public exploit3
Patch rate%0
Avg. CVSS8.3
12-month vulnerability rate
0
0
0
1
0
0
0
0
4
2
0
0
CVE KEV
CVE severity distribution
9toplam CVE
Critical2 (22%)
High4 (44%)
Uncertain3 (33%)
Patch and exploitation view
%0
Verified patch
%33
CISA KEV
%33
Public exploit
0Patch available
0Partial
3Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
7.1
CVE-2026-40145
Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility
B
Patch status unknownEPSS %0
7.3
CVE-2026-40144
Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)
B
Patch status unknownEPSS %0
9.9
CVE-2026-40141
Vulnerability in Beyondtrust Privileged Remote Access
B
Patch status unknownEPSS %1
7.5
CVE-2026-40140
Uncontrolled resource consumption in Beyondtrust Privileged Remote Access
B
Patch status unknownEPSS %1
9.8
CVE-2026-40139
Improper authentication in Beyondtrust Remote Support
B
Patch status unknownEPSS %1
8.1
CVE-2026-40138
Improper authentication in Beyondtrust Privileged Remote Access
B
Patch status unknownEPSS %0
-
CVE-2026-1731 Actively exploited
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
B
WorkaroundEPSS %92
-
CVE-2024-12686 Actively exploited
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
B
WorkaroundEPSS %14
-
CVE-2024-12356 Actively exploited
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
B
WorkaroundEPSS %87