Beyondtrust: >> Privileged Remote Access >> 24.3.4 Security Vulnerabilities
CVE-2026-1731
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
Known exploited
CVSS Score
9.8
EPSS Score
0.756
Published
2026-02-06
BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A local authenticated attacker can view the connection details of a ShellJump session that was initiated with external tools, allowing unauthorized access to connected sessions.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-05-05