CVE-2026-1731
CRITICAL
CVSS: 9.8
EPSS: 89.5%
VulnCheck KEV
Weaponized
Ransomware
Metasploit
CWE-78
T1059
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
Published: 2026-02-06