Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
5 / 5 results
criticalbug_reportVulnerabilityBeyondTrust Remote Support critical flaw requires immediate patching
BeyondTrust Remote Support software. Specific affected versions not disclosed in available advisory. Remote support/privileged access management deployments at risk.
criticalbug_reportVulnerabilityBeyondTrust Remote Support zero-day exploited by China APT Armory Castle
BeyondTrust Remote Support (formerly Bomgar) versions 24.3.1 through 26.2.3. Self-hosted deployments exposed to the internet are at highest risk. SaaS customers were patched automatically as of October 9, 2026.
criticalbug_reportVulnerabilityBeyondTrust Remote Support zero-day exploited by China-nexus APT since August
BeyondTrust Remote Support (RS) version 26.2.3 and earlier; Privileged Remote Access (PRA) shares affected code. SaaS customers patched October 8, 2026; self-hosted installations require manual patching if auto-update disabled.
criticalbug_reportVulnerabilityBeyondTrust RS and PRA authentication bypass flaws require patching
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) software. Specific affected versions not provided in available data.
criticalbug_reportVulnerabilityBeyondTrust Remote Support/PRA critical auth bypass (CVE-2026-40138)
BeyondTrust Remote Support and Privileged Remote Access (PRA) products. Specific affected versions not provided in available data. CVE-2026-40138 is a pre-authentication vulnerability with CVSS 9.2.