CVE-2026-1731

Description

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

75.552

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2026-1731 are affected in BeyondTrust Privileged Remote Access 24.3.4	Windows
Vulnerabilities CVE-2025-0217,CVE-2026-1731 are affected in BeyondTrust Privileged Remote Access 25.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234