CVE-2026-1731

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

Privileged Remote Access

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.

6. Feb 2026

Ausgewertete Quellen

• Hersteller
  https://www.beyondtrust.com/trust-center/security-advisories/bt26-02
• Hinweis
  https://www.greynoise.io/blog/reconnaissance-beyondtrust-rce-cve-2026-1731
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1731
• CISA
  BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
• NVD
  CVE-2026-1731
• GitHub
  https://github.com/win3zz/CVE-2026-1731