Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA

hacktron.ai | vulnerability | CVE-2026-1731 | #ai-security | #rce | #vulnerability-disclosure | #pre-auth-rce | #beyondtrust | #cve-2026-1731 | #remote-support | #pra

Summary

Hacktron AI's agents found a critical pre-auth RCE in BeyondTrust Remote Support and older Privileged Remote Access versions, assigned CVE-2026-1731 with a CVSS 9.9 score.
CVE
CVE-2026-1731
Published
Collected

original ↗

Related coverage

vulnerability · netspi.com
CVE-2026-1731 – BeyondTrust RCE Overview and Takeaways
Learn about CVE-2026-1731, a critical RCE vulnerability in BeyondTrust RS & PRA products. Discover its impact, affected versions, and remediation steps.
blog · wiz.io
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure
Wiz's Scan for Good pairs AI scanning with human researchers to find public exposures in critical infrastructure and nonprofits, driving hundreds of fixes with Google DeepMind and CISA support.
research · idnsec.com
Mitigating RCE Impact Like in OpenAI Hack with Defense-in-Depth
Using HacktronAI's OpenAI Discourse hack disclosure, this article covers sandboxing, runtime protection, and AI-assisted defense to shrink the blast radius of RCE across interconnected apps.
research · github.com
[CVE-2024-6100] CyberKimi Benchmarks: Autonomous Exploitation Traces & Evidence
Provides verifiable, transparent evidence of advanced LLMs performing complex, multi-step binary and browser exploitation autonomously under strict ASLR and memory randomization defenses.
blog · projectzero.google
How to Compromise the Enterprise Endpoint
Project Zero publishes details of multiple critical vulnerabilities, including several wormable remote code execution flaws affecting enterprise endpoints.
vulnerability · hacktron.ai
Pre-Auth RCE in OpenAM via jato.clientSession (CVE-2026-33439)
Hacktron AI discovers a critical pre-authentication RCE in OpenAM through a forgotten deserialization parameter that the original CVE-2021-35464 fix missed.
back