Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-1731 – BeyondTrust RCE Overview and Takeaways

netspi.com | vulnerability | CVE-2026-1731 | #rce | #patching | #command-injection | #beyondtrust | #cve-2026-1731 | #remote-support

Summary

Learn about CVE-2026-1731, a critical RCE vulnerability in BeyondTrust RS & PRA products. Discover its impact, affected versions, and remediation steps.
CVE
CVE-2026-1731
Published
Collected

original ↗

Related coverage

vulnerability · hacktron.ai
CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA
Hacktron AI's agents found a critical pre-auth RCE in BeyondTrust Remote Support and older Privileged Remote Access versions, assigned CVE-2026-1731 with a CVSS 9.9 score.
research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
vulnerability · netspi.com
CVE-2025-26399 SolarWinds Web Help Desk Overview and Takeaways
CVE-2025-26399 is a critical unauthenticated deserialization flaw (CVSS 9.8) in SolarWinds Web Help Desk, a patch bypass now actively exploited and listed in CISA's KEV catalog.
vulnerability · bishopfox.com
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490
Bishop Fox maps NetScaler CVE-2026-19490, a CVSS 9.3 SAML bypass: one request runs post-login code, impact ranges from crash to internal proxy to root, plus a safe patch-state checker.
Medium · vulnerability · depthfirst.com
Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)
Netty's SMTP codec allowed CRLF injection in user input, letting attackers append forged mail commands that bypass SPF, DKIM and DMARC; depthfirst's agent found it, tracked as CVE-2025-59419.
vulnerability · bishopfox.com
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
CVE-2026-28326 is an unauthenticated RCE in SolarWinds ARM where a hardcoded shared secret on TCP 55555 leads to SYSTEM-level code execution. Patch now.
back