BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
CVE-2026-1731
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
这是什么
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
CISA: BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption.
该怎么做
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
美国联邦机构的修复期限：2026年2月16日
BeyondTrust 的其他被利用漏洞
| 加入日期 | 漏洞 | 产品 | 严重程度 | 受攻击概率 |
|---|---|---|---|---|
| 2026年10月16日 | Authentication Bypass by Spoofing | Remote Support | 严重 9.3 | 19% |
| 2025年1月13日 | OS Command Injection | Privileged Remote Access (PRA) and Remote Support (RS) | 中 6.6 | 32% |
| 2024年12月19日 | Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | Privileged Remote Access (PRA) and Remote Support (RS) | 严重 9.8 | 87% |
来源：Known Exploited Vulnerabilities（CISA，公有领域）、CVE records（cve.org）和 EPSS（FIRST）。受攻击概率是 EPSS 对未来 30 天内有人尝试利用该漏洞的估计。