Attackers exploit BeyondTrust CVE-2026-1731 within hours of PoC release
ID: a5160437-e5e0-5902-aa84-6fcf7b5d4633
STIX ID: report--a5160437-e5e0-5902-aa84-6fcf7b5d4633
Feed Name: Security Affairs
Threat Score
**BeyondTrust CVE-2026-1731 (CVSS 9.9) was patched on February 6, 2026, but a public proof-of-concept posted on February 10 triggered rapid reconnaissance and exploitation attempts within 24 hours; roughly 11,000 instances of BeyondTrust Remote Support were reported exposed online, and GreyNoise observed concentrated scanning from a single IP that also probes other high-value products.**
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.