BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA

**BeyondTrust CVE-2026-1731 (critical pre-auth RCE)**: BeyondTrust disclosed a critical command-injection vulnerability (CVSS 9.9) impacting Remote Support (≤25.3.1) and Privileged Remote Access (≤24.3.4) that could allow unauthenticated remote command execution. Patches are available (RS 25.3.2+, PRA 25.1.1+) and the vendor urges self-hosted customers to apply them; researcher Harsh Jaiswal reported the flaw was discovered via AI-enabled analysis on Jan 31, 2026 and found ~11,000 internet-exposed instances (≈8,500 on-prem).