MSRXBeyondTrust vulnerabilities being exploited
2 BeyondTrust flaws were confirmed exploited in the wild in the past 365 days, 1 used in ransomware, across 2 products: Remote Support, Remote Support (RS) and Privileged Remote Access (PRA). If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-10-16 | CVE-2026-102764 Remote Support BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. | 2026-10-19 |
| 2026-02-13 | CVE-2026-1731 Remote Support (RS) and Privileged Remote Access (PRA) ransomwareBeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption. | 2026-02-16 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.