GCVE - cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Beyondtrust (`673561b0-1cd3-565b-80ef-06b287294740`)
Product	Remote Support (`e6786d43-d13c-5fd1-9fe9-30ec65ffcc17`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-40141`	vulnerable	2026-07-29 00:49:29.395466	High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions. Published: 2026-07-06T16:13:42.284Z Updated: 2026-07-07T14:56:42.895Z Open on db.gcve.eu Reference links https://www.beyondtrust.com/trust-center/security-advisories/bt26-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-40140`	vulnerable	2026-07-29 00:49:29.395083	High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting appliance availability. Published: 2026-07-06T16:13:22.126Z Updated: 2026-07-07T15:01:24.511Z Open on db.gcve.eu Reference links https://www.beyondtrust.com/trust-center/security-advisories/bt26-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-40139`	vulnerable	2026-07-29 00:49:29.394786	Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled. Published: 2026-07-06T16:13:02.413Z Updated: 2026-07-07T15:00:13.079Z Open on db.gcve.eu Reference links https://www.beyondtrust.com/trust-center/security-advisories/bt26-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-40138`	vulnerable	2026-07-29 00:49:29.392766	Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled Published: 2026-07-06T16:12:42.627Z Updated: 2026-07-07T14:59:19.946Z Open on db.gcve.eu Reference links https://www.beyondtrust.com/trust-center/security-advisories/bt26-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-1731`	vulnerable	2026-06-08 07:49:09.494724	Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user. Published: 2026-02-06T21:49:20.844Z Updated: 2026-02-26T15:04:15.451Z Open on db.gcve.eu Reference links https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0023293 https://www.beyondtrust.com/trust-center/security-advisories/bt26-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5309`	vulnerable	2026-06-08 07:35:24.617232	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12686`	vulnerable	2026-06-08 06:25:35.904965	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12356`	vulnerable	2026-06-08 06:23:51.772182	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.