VulnerabilitycriticalExploited in the wild

BeyondTrust fixes easy-to-exploit pre-auth RCE vulnerability in remote access tools (CVE-2026-1731)

Help Net Securityby @zeljkazorzFeb 20, 2026 · 15:05 UTC (Feb 20, 2026)3 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2026-1731 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-1731 CVE-2024-12356

Tags: cve-2026-1731 cve-2024-12356 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-12356	Unauthenticated Command Injection in BeyondTrust Privileged Remote Access/Remote Support	9.8	87%	KEVPoC	Dec 17, 2024 KEV Dec 19, 2024
CVE-2026-1731	Pre-Authentication OS Command Injection RCE in BeyondTrust Remote Support and PRA	9.9	93%	KEVRansomwarePoC	Feb 6, 2026 KEV Feb 13, 2026

From the original article

3 min read at helpnetsecurity.com

BeyondTrust fixed a critical remote code execution vulnerability (CVE-2026-1731) in its Remote Support (RS) and Privileged Remote Access (PRA) solutions and is urging self-hosted customers to apply the patch as soon a possible.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.