LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

BeyondTrust CVEs

Every BeyondTrust vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

7Tracked CVEs 3Known exploited 4Critical 9.0+ 0Covered this week
All Known exploited Critical High This week
7 CVEs EPSSCoverage
9.9CVSS 4.0 CVE-2026-1731 Exploited Ransomware Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA) EPSS 94% 1 story 4 months ago 9.8CVSS 3.1 CVE-2024-12356 Exploited Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) EPSS 87% 1 story 4 months ago 9.2CVSS 4.0 CVE-2026-40138 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access BeyondTrust · Remote Support EPSS 0.46% 1 story 4 months ago 9.2CVSS 4.0 CVE-2026-40139 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access BeyondTrust · Remote Support EPSS 0.75% 1 story 4 months ago 8.7CVSS 4.0 CVE-2026-40140 High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access BeyondTrust · Remote Support EPSS 0.65% 1 story 4 months ago 8.5CVSS 4.0 CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access BeyondTrust · Remote Support EPSS 0.53% 1 story 4 months ago 6.6CVSS 3.1 CVE-2024-12686 Exploited Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) EPSS 33% 1 story 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.

Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed