BeyondTrust Flaw Fuels Global Attacks

Cybersecurity experts face mounting challenges as threat actors exploit a critical vulnerability known as CVE-2026-1731 in BeyondTrust’s Remote Support (RS) and Privileged Remote Access (PRA) products. This vulnerability, with a near-maximum CVSS score of 9.9, enables attackers to run operating system commands remotely, potentially leading to full system compromise. BeyondTrust has responded by releasing crucial patches on February 6, following Hacktron’s report revealing thousands of exposed instances online.

Palo Alto Networks’ Unit 42 reported that attackers are deploying tools like VShell for persistence and lateral movement. A custom Python script allows brief hijacking of admin accounts, complicating defense for organizations in finance, healthcare, and more. Additionally, advanced web shells and config STOMPing techniques enhance attackers’ stealth and effectiveness. The beyondtrust flaw persists as a significant cybersecurity concern, with U.S. and international sectors actively targeted.

Read the full official news article: https://securityaffairs.com/188370/hacking/cve-2026-1731-fuels-ongoing-attacks-on-beyondtrust-remote-access-products.html