Pre-auth RCE CVE-2026-1731 (CVSS 9.9) in BeyondTrust Remote Support and older Privileged Remote Access
Hacktron AI disclosed CVE-2026-1731, a critical (CVSS 9.9) pre-authentication remote code execution vulnerability in BeyondTrust Remote Support (RS) and older versions of Privileged Remote Access (PRA). An unauthenticated remote attacker could run operating system commands in the context of the site user. Hacktron found the flaw through A…