Exploited vulnerabilitiesBriefConfirmed by two or more outlets
BeyondTrust Remote Support / PRA pre-auth RCE (CVE-2026-1731)
CVSS 9.9. Affected: RS 25.3.1 and earlier, PRA 24.3.4 and earlier.
- Disclosed
What happened
- CVSS 9.9. Affected: RS 25.3.1 and earlier, PRA 24.3.4 and earlier. SaaS patched 2 Feb.
- PoC 10 Feb. KEV 13 Feb with a 3-day deadline. Ransomware use reported.
Live scores
Live scores
CVE-2026-1731- EPSS
- 0.939
very likely to be attacked soon - VEDAS
- 0.980
strong exploit evidence - On CISA KEV
- Yes, since 2026-02-13
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
- https://unit42.paloaltonetworks.com/beyondtrust-cve-2026-1731/
- https://www.bleepingcomputer.com/news/security/cisa-beyondtrust-rce-flaw-now-exploited-in-ransomware-attacks/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.