https://patchfirst.co/vendor/beyondtrust/New and newly exploited BeyondTrust CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-102764/CVE-2026-102764#kevFri, 16 Oct 2026 00:00:00 GMTBeyondTrust · Remote Support. In CISA KEV since 2026-10-16. ENISA EUVD lists it as exploited. EPSS 18.9% (higher than 97.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 79.3 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2026-1731/CVE-2026-1731#kevFri, 13 Feb 2026 00:00:00 GMTBeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA). In CISA KEV since 2026-02-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 93.1% (higher than 99.83% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 2 threat reports. Priority 91.0 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2024-12686/CVE-2024-12686#kevMon, 13 Jan 2025 00:00:00 GMTBeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS). In CISA KEV since 2025-01-13. ENISA EUVD lists it as exploited. EPSS 32.2% (higher than 98.3% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1068 Exploitation for Privilege Escalation. Priority 62.7 of 100.kevT1059T1068https://patchfirst.co/cve/CVE-2024-12356/CVE-2024-12356#kevThu, 19 Dec 2024 00:00:00 GMTBeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) . In CISA KEV since 2024-12-19. ENISA EUVD lists it as exploited. EPSS 87.4% (higher than 99.76% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059