VULNERABILITY INTELLIGENCE

CVE-2026-1731

CVSS score9.8 CRITICAL
EPSS probability93.85%
CISA KEVKnown exploited vulnerability
Published2026-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

Vendor / product: BeyondTrust / Remote Support (RS) and Privileged Remote Access (PRA)

Description

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.

Weakness classification

  • 13061848-ea10-403d-bd75-c83a022c2891: CWE-78

Primary references