Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Privileged access management · in CISA KEV

BeyondTrust in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 4 entries for BeyondTrust as of catalog version 2026.11.06, released November 6, 2026. The newest was added October 16, 2026, and the latest federal due date is October 19, 2026. CISA marks 1 of them as known ransomware use.

Updated

entries in the catalog
4
newest addition
October 16, 2026
latest federal due date
October 19, 2026
marked known ransomware use
1

Directory record

Website
www.beyondtrust.com
Categories
Privileged access management (primary), Non-human identity security
Headquarters
Johns Creek, United States
Founded
Not established
Ownership
Owned by Francisco Partners since 2018
Company record
BeyondTrust on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “BeyondTrust”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added October 16, 2026

    CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

    Remote Support · on must-patch

    Due October 19, 2026

  2. Added February 13, 2026

    CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

    Remote Support (RS) and Privileged Remote Access (PRA) · known ransomware use

    Due February 16, 2026

  3. Added January 13, 2025

    CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

    Privileged Remote Access (PRA) and Remote Support (RS)

    Due February 3, 2025

  4. Added December 19, 2024

    CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

    Privileged Remote Access (PRA) and Remote Support (RS)

    Due December 27, 2024

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Daily briefing · October 19, 2026

    CISA: Attackers Actively Exploiting BeyondTrust Remote Support Flaw

  2. Daily briefing · October 18, 2026

    CISA urges emergency patching of critical BeyondTrust Remote Support flaw

  3. Daily briefing · October 17, 2026

    CISA Orders Urgent Patching for Exploited BeyondTrust Remote Support Flaw

  4. Weekly archive · Oct 12 – Oct 18, 2026

    CISA Flags Actively Exploited BeyondTrust Remote Support Flaw

  5. Weekly archive · Feb 9 – Feb 15, 2026

    BeyondTrust Remote Support Flaw Added to CISA's KEV List

  6. Weekly archive · Jan 6 – Jan 12, 2025

    Treasury Confirmed Sole Agency Hit in BeyondTrust Compromise

  7. Weekly archive · Dec 30 – Jan 5, 2025

    Treasury says Chinese state hackers got in through BeyondTrust

  8. Weekly archive · Dec 16 – Dec 22, 2024

    CISA Adds Exploited BeyondTrust Flaw to KEV Catalog

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for BeyondTrust, published November 8, 2026