MEIFP – Most Exploited Internet-Facing Products

BeyondTrust

Products: Privileged Identity · Privileged Remote Access · Remote Support · Remote Support(RS) & Privileged Remote Access(PRA)

101.1

Score

CVEs

Active

PoC

KEV

#23

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-1731	2026-02-06	9.9v4.0	ACTIVE	Low	None	YES	40.6	Remote Support(RS) & Privileged Remote Access(PRA)	BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the co
CVE-2024-12686	2024-12-18	6.6v3.1	ACTIVE	High	High	no	20.0	Remote Support(RS) & Privileged Remote Access(PRA)	A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CVE-2024-12356	2024-12-17	9.8v3.1	ACTIVE	Low	None	YES	40.6	Privileged Remote AccessRemote Support	A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3