Skip to main content
EVULNABLE
Home

BeyondTrust

CVEs currently on EVULNABLE's Priority Feed for BeyondTrust, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

Week of 2026-04-20: 0 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 0 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 0 added to KEV Week of 2026-05-25: 0 added to KEV Week of 2026-06-01: 0 added to KEV Week of 2026-06-08: 0 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 0 added to KEV Week of 2026-07-13: 0 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 0 added to KEV Week of 2026-09-07: 0 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 0 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 1 added to KEV
1
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2000
2026-04-2700
2026-05-0400
2026-05-1100
2026-05-1800
2026-05-2500
2026-06-0100
2026-06-0800
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0600
2026-07-1300
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3100
2026-09-0700
2026-09-1400
2026-09-2100
2026-09-2800
2026-10-0500
2026-10-12 (so far)10

In EVULNABLE's ranked feed

Showing all 4 BeyondTrust CVEs in EVULNABLE's ranked feed.

#1 95 Immediate CVE-2026-1731 ExigentCISA federal deadline · Overdue by 8 monthsRansomwareCISA KEV BeyondTrust — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability KEV + ransomware, EPSS 92.5%

EVRS 95/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.9 (NVD)EPSS92.5% · 99.83rd pctlKEV since2026-02-13

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#2 85 Immediate CVE-2024-12356 KEV since 2024 · listed over a yearCISA KEV BeyondTrust — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability KEV, EPSS 87.3%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS87.3% · 99.75th pctlKEV since2024-12-19

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.873.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#3 85 Immediate CVE-2026-102764 ExigentCISA federal deadline in 3 daysCISA KEV BeyondTrust — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability KEV, EPSS 0.6%, added to KEV within the last 30 days

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.3 (NVD)EPSS0.6% · 47.6th pctlKEV since2026-10-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.006.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#4 75 Urgent CVE-2024-12686 KEV since 2025 · listed over a yearCISA KEV BeyondTrust — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability KEV, EPSS 13.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS13.7% · 96.5th pctlKEV since2025-01-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.137.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗