CVE-2024-12356

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.

CISA Known Exploited Vulnerability

Vendor / Product BeyondTrust — Privileged Remote Access (PRA) and Remote Support (RS)
Date Added 2024-12-19
Remediation Due 2024-12-27
https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12356

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

87.26%
Raw Score 0.872580
Percentile 99.8%
Date 2026-10-28

Intelligence Sources

kev ref →