CVE-2026-1731Vulnerability
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
Reported by 8 independent sources · first reported by GreyNoise · last reported
Last reported 5 days ago
Fix due 16 Feb 2026
Used by ransomware: knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
8 reports, newest first · the exact sentence from each-
CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild“Rapid7 covered CVE-2026-1731, which was added to KEV in February 2026.”
-
The vulnerabilities AI finds are the ones attackers want“CVE-2026-1731, an unauthenticated OS command injection vulnerability in BeyondTrust Privileged Remote Access and Remote Support, was discovered by the Hacktron AI research agent.”
-
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery“One example is CVE-2026-1731, an unauthenticated OS command injection flaw in BeyondTrust Privileged Remote Access and Remote Support, discovered autonomously by the Hacktron AI research agent.”
-
Vulnerability Discovery and Exploitation Trends in the AI Era“A notable case is CVE-2026-1731, an unauthenticated OS command injection flaw in BeyondTrust Privileged Remote Access (PRA) and Remote Support that was discovered autonomously by a third-party research agent (Hacktron AI).”
-
AI-Found Vulnerabilities More Likely to Enable RCE, Google Says“It cited CVE-2026-1731, an unauthenticated command injection flaw in BeyondTrust Privileged Remote Access and Remote Support that Hacktron AI discovered autonomously.”
-
Exploits and vulnerabilities in Q2 2026“CVE-2024-12356 and CVE-2026-1731: command injection vulnerabilities in BeyondTrust software that allow an attacker to send malicious commands even without system authentication”
-
Uptick in Bomgar RMM Exploitation“…ntermittent waves of exploitation we have seen over the past two months, after BeyondTrust first disclosed a critical-severity flaw (CVE-2026-1731) in Bomgar in February.”
-
Reconnaissance Has Begun for the New BeyondTrust RCE (CVE-2026-1731): Here's What We See So Far“Reconnaissance Has Begun for the New BeyondTrust RCE (CVE-2026-1731): Here's What We See So Far”
Indicators reported together
named in the same reportsAlso named with it: CVE-2024-12356, CVE-2025-3248, CVE-2026-42271, CVE-2026-5027, CVE-2026-43284, CVE-2025-8088, CVE-2018-0802, CVE-2017-11882, CVE-2017-0199, CVE-2023-38831, CVE-2025-6218, CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-31635, CVE-2026-43494, CVE-2026-46331, CVE-2022-0847, CVE-2019-13272, CVE-2021-22555
Thanks — we review every report.