Approved changes feed: RSS · Atom

cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBeyondtrust (673561b0-1cd3-565b-80ef-06b287294740)
ProductPrivileged Remote Access (8f7d0fc4-e800-548d-baa9-26a900491edf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40140 vulnerable 2026-07-29 00:49:29.395218 High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting appliance availability.
Published: 2026-07-06T16:13:22.126Z
Updated: 2026-07-07T15:01:24.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40139 vulnerable 2026-07-29 00:49:29.394829 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled.
Published: 2026-07-06T16:13:02.413Z
Updated: 2026-07-07T15:00:13.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40138 vulnerable 2026-07-29 00:49:29.394317 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled
Published: 2026-07-06T16:12:42.627Z
Updated: 2026-07-07T14:59:19.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1731 vulnerable 2026-06-08 07:49:09.493921 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
Published: 2026-02-06T21:49:20.844Z
Updated: 2026-02-26T15:04:15.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5309 vulnerable 2026-06-08 07:35:24.615501 Remote Support & Privileged Remote Access server side template injection
The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.
Published: 2025-06-16T16:06:14.413Z
Updated: 2026-02-26T17:50:35.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0217 vulnerable 2026-06-08 07:02:23.941555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12686 vulnerable 2026-06-08 06:25:35.903722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12356 vulnerable 2026-06-08 06:23:51.773454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23632 vulnerable 2026-06-08 05:56:04.122865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.