CVE-2026-1731
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
Explotada activamente
- En el catálogo CISA de vulnerabilidades explotadas desde el 13 feb 2026
- Las agencias federales de EE. UU. deben corregirla antes del 16 feb 2026 (BOD 22-01)
- Primer ataque observado 2 días después de la divulgación
- Confirmada por sensores, no solo por informes
- Utilizada en campañas de ransomware
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Fuente: CISA KEV · 18 ago 2026 22 jun 2026 15 jun 2026 11 jun 2026 10 jun 2026 7 may 2026
Puntuación CVSS9.8 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTipo de debilidad (CWE)CWE-78
Fabricantesbeyondtrust
Productos afectados
| Fabricantes | Prodotto | Versioni |
|---|---|---|
| beyondtrust | privileged remote access | < 25.1 |
| beyondtrust | remote support | < 25.3.2 |
Artículos relacionados
This product uses the NVD API but is not endorsed or certified by the NVD.