CVE-2026-1731

CRITICAL

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.

CVSS v3.1 Score

9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 2/6/2026Modified: 6/17/2026

Related Intelligence (2)

CRITICALApt

CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Overview On October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support (RS) , its platform for remotely troubleshooting and administering endpoints. Tracked as CVE-2026-102764 and assigned a CVSSv4 score of 9.3 , the vulnerability allows unauthenticated remote attackers to perform file operations on an affected appliance without user interaction. Versions 26.2.3 and

CVE-2026-102764CVE-2026-1731
Rapid7
CRITICALZero Day

BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alert

Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical zero-day to gain root control, access credential vaults, and establish footholds for lateral movement, according to Mandiant and Google Threat Intelligence Group. “Organizations should prepare for potential widespread

CVE-2026-102764CVE-2026-1731
CSO Online

References (5)

https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0023293Permissions Requiredhttps://www.beyondtrust.com/trust-center/security-advisories/bt26-02Vendor Advisoryhttps://github.com/win3zz/CVE-2026-1731ExploitThird Party Advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1731US Government Resourcehttps://www.greynoise.io/blog/reconnaissance-beyondtrust-rce-cve-2026-1731Third Party Advisory