Description
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BeyondTrust | Remote Support | ≤ 25.3.2 | — |
| BeyondTrust | Privileged Remote Access | ≤ 25.3.2 | — |
Advisories 2
- NCSC-2026-0223 Kwetsbaarheden verholpen in BeyondTrust Remote Support en Privileged Remote Access NCSC-NL (Netherlands) · Jul 10, 2026
- WID-SEC-2026-2215 BeyondTrust Privileged Remote Access und Remote Support: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 7, 2026