Beyondtrust Remote Support(Rs) & Privileged Remote Access(Pra) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Beyondtrust Remote Support(Rs) & Privileged Remote Access(Pra), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2025-5309beyondtrustprivileged_remote_access+3
EPSS score
0.95%
The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.7.2CVE-2024-12686beyondtrustprivileged_remote_access+2KEV
EPSS score
13.70%
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.9.9CVE-2026-1731beyondtrustprivileged_remote_access+2KEVRansomware
EPSS score
92.46%
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.