Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2024-12686

A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

CVSS 6.6 · MediumBuzz score 71.6KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 71.6

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 27.1 · diversity 19.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
27.1
14 evidence mentions in the snapshot
Diversity score
19.5
6 sources across 3 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
14 source links · newest first
  • BeyondTrust fixes critical RCE flaw in remote access toolsCSO Online

    Companies using self-hosted versions of BeyondTrust Remote Support (RS) or Privileged Remote Access (PRA) should deploy patches for a critical vulnerability that allows attacks to execute OS commands without authentication. “Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption,” BeyondTrust said in […]

    newswww.csoonline.comFeb 10, 2026, 11:22 PM
  • BeyondTrust Patches Critical RCE VulnerabilitySecurityWeek

    Affecting both RS and PRA, the bug can be exploited remotely via crafted requests without authentication.

    newswww.securityweek.comFeb 10, 2026, 11:24 AM
  • Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacksSecurity Affairs

    Threat actors are exploiting a zero-day SQL injection vulnerability in PostgreSQL, according to researchers from cybersecurity firm Rapid7. Rapid7 researchers discovered a high-severity SQL injection flaw, tracked as CVE-2025-1094, in PostgreSQL’s psql tool. The experts discovered the flaw while investigating the exploitation of the vulnerability CVE-2024-12356 for remote code execution. BeyondTrust patched CVE-2024-12356 in December […]

    newssecurityaffairs.comFeb 14, 2025, 9:23 AM
  • PostgreSQL patches SQLi vulnerability likely exploited in BeyondTrust attacksCSO Online

    Attackers who exploited a zero-day vulnerability in BeyondTrust Privileged Remote Access and Remote Support products in December likely also exploited a previously unknown SQL injection flaw in PostgreSQL, a widely used open-source object-relational database system. The PostgreSQL issue was fixed on Thursday and users are advised to upgrade their database servers as soon as possible. […]

    newswww.csoonline.comFeb 14, 2025, 12:44 AM
  • Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust ExploitationSecurityWeek

    Rapid7 finds a new zero-day vulnerability in PostgreSQL and links it to chain of attacks against a BeyondTrust Remote Support product.

    newswww.securityweek.comFeb 13, 2025, 8:03 PM
  • CISA warns second BeyondTrust vulnerability also exploited in the wildCSO Online

    The US Cybersecurity and Infrastructure Security Agency (CISA) has added to its catalog of known exploited vulnerabilities a second vulnerability by BeyondTrust, which was patched in December. The flaw is different than the one that was used to compromise US Treasury workstations last month. At the end of December, the US Department of the Treasury […]

    newswww.csoonline.comJan 15, 2025, 11:55 PM
  • CISA Warns of Second BeyondTrust Vulnerability Exploited in AttacksSecurityWeek

    Attackers have been exploiting a second vulnerability in BeyondTrust’s remote management solutions, CISA warns.

    newswww.securityweek.comJan 14, 2025, 11:47 AM
  • U.S. CISA adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2024-12686 (CVSS score of 6.6) The flaw is an OS Command Injection Vulnerability in BeyondTrust […]

    newssecurityaffairs.comJan 13, 2025, 10:10 PM
  • Critical Vulnerabilities in SimpleHelp Remote Support SoftwareHorizon3.ai

    SimpleHelp remote support software is susceptible to critical vulnerabilities that could allow full takeover of SimpleHelp servers. Users of SimpleHelp should upgrade to the latest version ASAP.

    exploithorizon3.aiJan 13, 2025, 8:04 PM
  • CISA: No Federal Agency Beyond Treasury Impacted by BeyondTrust IncidentSecurityWeek

    CISA says no federal agencies other than Treasury were impacted by the recent compromise of a BeyondTrust cloud-based service.

    newswww.securityweek.comJan 7, 2025, 11:30 AM
  • 6th January– Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 6th January, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Check Point elaborated on the US Treasury Department cyber-attack that compromised employee workstations and classified documents. The breach, attributed to a China state-sponsored threat actor, involved unauthorized remote access using a security […]

    vendorresearch.checkpoint.comJan 6, 2025, 1:26 PM
  • China-linked actors hacked US Treasury DepartmentSecurity Affairs

    China-linked threat actors breached the U.S. Treasury Department by hacking a remote support platform used by the agency. China-linked threat actors breached the U.S. Treasury Department via a compromised remote support platform. The Treasury Department discovered the security breach on December 8th from its vendor BeyondTrust, according to a letter to lawmakers. BeyondTrust provides Privileged […]

    newssecurityaffairs.comDec 31, 2024, 6:55 AM
  • CISA Urges Immediate Patching of Exploited BeyondTrust VulnerabilitySecurityWeek

    CISA is urging federal agencies to patch a recent critical vulnerability in BeyondTrust remote access products in one week.

    newswww.securityweek.comDec 20, 2024, 11:20 AM
  • BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356)Help Net Security

    BeyondTrust has fixed an unauthenticated command injection vulnerability (CVE-2024-12356) in its Privileged Remote Access (PRA) and Remote Support (RS) products that may allow remote code execution, and is urging organizations with on-premise installations to test the patch and implement it quickly. About CVE-2024-12356 BeyondTrust Privileged Remote Access is an enterprise solution that mediates secure remote access to enterprise environments for employees and trusted vendors. BeyondTrust Remote Support allows organizations’ IT helpdesk personnel to securely connect … More →

    newswww.helpnetsecurity.comDec 18, 2024, 9:39 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence