MEIFP – Most Exploited Internet-Facing Products

BeyondTrust

Products: Privileged Identity · Privileged Remote Access · Remote Support · Remote Support(RS) & Privileged Remote Access(PRA)

141.7

Score

CVEs

Active

PoC

KEV

#15

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-102764	2026-10-15	9.3v4.0	ACTIVE	Low	None	YES	40.6	Remote Support	The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
CVE-2026-1731	2026-02-06	9.9v4.0	ACTIVE	Low	None	YES	40.6	Remote Support(RS) & Privileged Remote Access(PRA)	BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the co
CVE-2024-12686	2024-12-18	6.6v3.1	ACTIVE	High	High	no	20.0	Remote Support(RS) & Privileged Remote Access(PRA)	A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CVE-2024-12356	2024-12-17	9.8v3.1	ACTIVE	Low	None	YES	40.6	Privileged Remote AccessRemote Support	A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3