CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support PoC de RCE pre-autenticación !WARNING Este script está destinado únicamente a fines educativos y de investigación. No lo utilices contra sistemas sin permiso explícito. El acceso o las pruebas no autorizados son ilegales y poco éticos. Lee el DESCARGO DE...

beyondtrust-rce-scanner

CVE-2026-1731 — RCE pre-autenticación en BeyondTrust Remote Support y PRA Descripción general RCE crítico de pre-autenticación en BeyondTrust Remote Support y Privileged Remote Access. Un atacante remoto no autenticado puede ejecutar comandos del sistema operativo. Campo| Valor ---|--- CVE|...

SimpleHelp <= 5.5.7 - Privilege Escalation

SimpleHelp remote support software v5.5.7 and before contains a privilege escalation caused by insufficient access controls in API key creation, letting low-privileges technicians escalate privileges to server admin, exploit requires low-privileges technician access. id: CVE-2024-57726 info: name...

CVE-2026-1731

BeyondTrust CVE-2026-1731 扫描器 用于检测 BeyondTrust Remote Support / Privileged Remote Access 暴露情况的专业 Python 扫描器。 开发者：issam junior Telegram：https://t.me/arabhackerzgroup CVE-2026-1731 — BeyondTrust 远程代码执行漏洞 CVE-2026-1731 是一个严重的远程代码执行（RCE）漏洞，影响 BeyondTrust Privileged Remote Access（PRA）和 Remote...

CVE-2026-1731

PoC de RCE ciega CVE-2026-1731 Versiones afectadas: Privileged Remote Access : = 24.3.4 Remote Support : = 25.3.1 Para más información, te recomiendo leer el análisis de attackerkb.com. Cómo compilar Necesitarás las siguientes herramientas para compilar este PoC: Git, rust 1. Clona mi repositorio...

CVE-2026-102117

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection to a destination of their choosing. That destination could...

CVE-2026-102117 Kiteworks Core Remote Code Execution

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection to a destination of their choosing. That destination could...

CVE-2026-102117 Kiteworks Core Remote Code Execution

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection to a destination of their choosing. That destination could...

CVE-2026-102117

The Kiteworks Core platform is vulnerable to Remote Code Execution (RCE) when the remote-support capability is licensed and enabled. An authenticated System Administrator who possesses the key protecting the submitted data can redirect the system's outbound support connection to a destination of ...

CVE-2024-12356

Unauthenticated Remote Code Execution in BeyondTrust Remote Support and Privileged Remote Access via Argument Injection and a PostgreSQL String-Escape Bypass Ethical Warning: Research, educational, and authorized testing purposes only. Please do not use against systems without permission...

CVE-2019-3980

CVE-2019-3980 Explotación de CVE-2019-3980 escrita en win32/c++ dependencia de openssl. Puerto de https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instrucciones Este PoC requiere bibliotecas openssl enlazadas estáticamente. Coloca los includes de openssl en...

CVE-2026-1731

BeyondTrust CVE-2026-1731 Scanner Professional Python scanner for detecting BeyondTrust Remote Support / Privileged Remote Access exposure. Developer: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability CVE-2026-1731 is a critical...

CVE-2026-5846

The CVE-2026-5846 entry concerns Watchfire Controller Software, where self-signed hard-coded RSA private keys and X.509 certificates are embedded in plaintext in the firmware patch binaries from Watchfire’s Remote Support filestore. This exposes TLS/HTTPS authentication and encryption for the con...

CVE-2026-5846

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the...

CVE-2026-5846: Use of Hard-coded Cryptographic Key

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the...

Vulnerabilities found in BeyondTrust Remote Support and Privileged Remote Access

BeyondTrust has identified vulnerabilities in the products Remote Support and Privileged Remote Access. These vulnerabilities involve multiple aspects of these products. There is a pre-authentication vulnerability that allows a network-based attacker to bypass authentication checks without prior...

BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-11)

The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by a command injection vulnerability. - All BeyondTrust Remote Support RS versions contain a command injection vulnerability that can be exploited by a user...

BeyondTrust Remote Support (RS) < 25.3.3 Multiple Vulnerabilities (BT26-03)

The version of BeyondTrust Remote Support RS running on the remote host is prior to 25.3.3. It is, therefore, affected by multiple vulnerabilities, including: - A critical pre-authentication vulnerability in the authentication subsystem. Improper validation of authentication data may allow a...

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

BeyondTrust has released updates to address two critical security flaws affecting Remote Support RS and Privileged Remote Access PRA products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices. The vulnerabilities are listed below -...

CVE-2026-40138

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance...