CVE-2026-1731 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

🗓️ 06 Feb 2026 21:49:20Reported by BTType

Pre-auth remote code execution in BeyondTrust RS and PRA enables unauthenticated command execution.

Reporter	Title	Published	Views	Family All 38
GithubExploit	Exploit for CVE-2026-1731	11 Feb 202609:18	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	20 Feb 202622:31	–	githubexploit
GithubExploit	Exploit for CVE-2026-1731	13 Feb 202619:48	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	18 Feb 202606:05	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	22 May 202620:44	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	22 Feb 202610:05	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	22 Mar 202612:17	–	githubexploit
ATTACKERKB	CVE-2026-1731	6 Feb 202621:49	–	attackerkb
Tenable Nessus	BeyondTrust Privileged Remote Access (PRA) <= 24.3.4 Pre-Authentication RCE (BT26-02)	10 Feb 202600:00	–	nessus
Tenable Nessus	BeyondTrust Remote Support (RS) < 25.3.2 Pre-Authentication RCE (BT26-02)	10 Feb 202600:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Remote Support(RS) & Privileged Remote Access(PRA)",
    "vendor": "BeyondTrust",
    "versions": [
      {
        "lessThanOrEqual": "RS 25.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "PRA 24.3.4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
beyondtrustcorp	www.beyondtrustcorp.service-now.com/csm
beyondtrust	www.beyondtrust.com/trust-center/security-advisories/bt26-02

06 Feb 2026 21:49Current

CVSS 49.9

EPSS0.81979

CWE-78