What is CVE-2026-1232?

CVE-2026-1232 is a vulnerability in Beyondtrust Privilege Management For Windows, classified under Protection Mechanism Failure. Published 2026-02-02.

Is CVE-2026-1232 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Beyondtrust Privilege Management For Windows

CVE-2026-1232

A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with elevated privileges may be able to bypass the product’s anti-tam…

EPSS: 0.000 (10.1th percentile) — read the EPSS interpretation.

Affected products

Beyondtrust Privilege Management For Windows — versions 0

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

Public proof-of-concept exploits

horrister/beyondtrust-cve-2026-1232

References

www.beyondtrust.com/trust-center/security-advisories/bt26-01
beyondtrustcorp.service-now.com/csm

Frequently asked questions

What is CVE-2026-1232?: CVE-2026-1232 is a vulnerability in Beyondtrust Privilege Management For Windows, classified under Protection Mechanism Failure. Published 2026-02-02.
Is CVE-2026-1232 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.