CVE-2026-1731
OS Command Injection in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA). CISA confirmed attackers exploit it and added it to its Known Exploited Vulnerabilities catalog on 13 February 2026.
- Product
- BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
- Added to CISA's catalog
- Federal fix-by date
- Ransomware
- Known to be used in ransomware
- Vendor advisories
- Sources
- CISA’s catalog, NVD entry
CISA’s description.
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption.
More from BeyondTrust this year.
- CVE-2026-102764 Authentication Bypass by Spoofing, added
Every flaw CISA confirmed exploited in the last 30 days is on the exploit watch. This is not security advice. Check the vendor’s advisory before acting. From CISA’s catalog of 4 November 2026.