Vulnerability Report

CVE-2026-1731

RCE CISA KEV Active

Title: Pre-authentication remote code execution in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

RCE

Proof Of Concept

PoC Available for CVE-2026-1731

CWE Category CWE-78

Published Date Feb 06, 2026

Modified Date Feb 17, 2026

Exploit Status Available

Score 9.9 CVSS v4.0

Exploit Probability (EPSS)

93.10%

Vulnerability Summary

CVE-2026-1731: BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.

Impacted Vendors

bomgar 1

beyondtrust 2

Reference Links

https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0023293 https://www.beyondtrust.com/trust-center/security-advisories/bt26-02

CVSS v4.0

Source Entity 13061848-ea10-403d-bd75-c83a022c2891

Severity CRITICAL

9.9

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

N/A

RAW VECTOR

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

Source Entity [email protected]

Severity CRITICAL

9.8

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2026-1731 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/z3r0h3ro/CVE-2026-1731-exp

View Code

GitHub https://github.com/win3zz/CVE-2026-1731

View Code

GitHub https://github.com/bytehazard/CVE-2026-1731

View Code

February 17, 2026 MODIFIED