BeyondTrust warns of critical RCE flaw in remote support software

BeyondTrust disclosed a critical pre-auth remote code execution vulnerability (CVE-2026-1731) in Remote Support and Privileged Remote Access that allows unauthenticated OS command execution via crafted client requests; BeyondTrust has secured cloud instances and released patches (Remote Support 25.3.2+, Privileged Remote Access 25.1.1+), while researchers warn roughly 11,000 internet-exposed instances (about 8,500 on-prem) could be vulnerable — no known active exploitation has been reported, though prior BeyondTrust zero-days were exploited by actors linked to the Silk Typhoon group.