Back to the CVE list
CVE-2026-1731 CISA KEV · Actively exploitedLinked to ransomware

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

CVSS score

—

EPSS probability

%91.7

Risk score

—

Published

8 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Scanner: CVE-2026-1731 BeyondTrust Remote Support Pre-auth RCE — Python checker for actively exploited vulnerability (CISA KEV)

Public PoCSource updated: 07.08.2026 20:36:42

CVE-2026-1731 PoC

Public PoCSource updated: 25.06.2026 01:51:12

CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability

Public PoCSource updated: 23.09.2026 18:03:54

Passive vulnerability scanner for CVE-2026-1731 — BeyondTrust RS/PRA pre-auth RCE (CVSS 9.9). Educational & defensive use only.

Public PoCSource updated: 24.08.2026 14:53:05

CVE-2026-1731 - Critical command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script

Public PoCSource updated: 05.10.2026 01:21:04

Nuclei: BeyondTrust Remote Support - Unauthenticated WebSocket RCE

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-1731"