Description
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BeyondTrust | Remote Support | ≤ 25.3.2 | — |
| BeyondTrust | Privilege Remote Access | ≤ 25.3.2 | — |
Advisories 2
- NCSC-2026-0223 Kwetsbaarheden verholpen in BeyondTrust Remote Support en Privileged Remote Access NCSC-NL (Netherlands) · Jul 10, 2026
- WID-SEC-2026-2215 BeyondTrust Privileged Remote Access und Remote Support: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 7, 2026