TI-2026-74999 CVE-2026-102764 · GHSA-pf95-v8m2-73q8
Weak origin checks in BeyondTrust Remote Support allow file actions
Priority CRITICAL 99KEV
The vulnerability exists within internal components of BeyondTrust’s Remote Support product.
Vulnerabilities
11 records
TI-2026-28960 CVE-2026-40141 · GHSA-v5xx-3hcf-fm67
High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
Priority LOW 37
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters.
TI-2026-28959 CVE-2026-40140 · GHSA-8v46-5p7g-p46j
High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
Priority MEDIUM 45
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem.
TI-2026-28958 CVE-2026-40139 · GHSA-5wv8-v74x-qrjc
Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
Priority MEDIUM 43
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support.
TI-2026-28957 CVE-2026-40138 · GHSA-hcrc-2pw3-4v88
Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
Priority MEDIUM 42
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access.
TI-2026-01414 CVE-2026-1731 · GHSA-p5wr-5p37-2wm6
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
Priority CRITICAL 100KEV
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability.
TI-2025-04768 CVE-2025-5309 · GHSA-gqmv-wgq3-w6p3
Remote Support & Privileged Remote Access server side template injection
Priority MEDIUM 41
The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.
TI-2024-11765 CVE-2024-12686 · GHSA-xqg3-vx4p-jmwm
Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
Priority CRITICAL 91KEV
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
TI-2024-11463 CVE-2024-12356 · GHSA-69c6-ccv7-v3g3
Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
Priority CRITICAL 100KEV
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
TI-2023-03984 CVE-2023-4310 · GHSA-7q7j-jq8x-xcjh
Command injection in BeyondTrust Privileged Remote Access
Priority MEDIUM 53
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request.
TI-2017-03909 CVE-2017-5996 · GHSA-9469-9gw8-5gq8
The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x…
Priority LOW 37
The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions.