BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA

🗓️ 09 Feb 2026 08:03:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 14 Views

BeyondTrust fixes critical pre-authentication RCE in Remote Support and Privileged Remote Access (CVE 2026 1731).

Reporter	Title	Published	Views	Family All 39
GithubExploit	Exploit for CVE-2026-1731	11 Feb 202609:18	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	20 Feb 202622:31	–	githubexploit
GithubExploit	Exploit for CVE-2026-1731	13 Feb 202619:48	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	18 Feb 202606:05	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	22 May 202620:44	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	22 Feb 202610:05	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	22 Mar 202612:17	–	githubexploit
ATTACKERKB	CVE-2026-1731	6 Feb 202621:49	–	attackerkb
BDU FSTEC	The vulnerability of the BeyondTrust Remote Support remote support tool and the BeyondTrust Privileged Remote Access remote access tool lies in the lack of measures taken to neutralize special elements used in the operating system command line. This allows attackers to execute arbitrary code.	19 Mar 202600:00	–	bdu_fstec
Tenable Nessus	BeyondTrust Privileged Remote Access (PRA) <= 24.3.4 Pre-Authentication RCE (BT26-02)	10 Feb 202600:00	–	nessus

12 Feb 2026 13:33Current

7.1High risk

Vulners AI Score7.1

CVSS 49.9

EPSS0.87172

SSVC

BeyondTrust Remote Support Privileged Remote Access CVE 2026 1731 Pre authentication Remote code execution