sign in--:--:--UTC

CVE-2026-1731

exploited in the wild

CVSS

9.8

Reports

5

First seen

Feb 11

Last seen

May 7

Affected product

BeyondTrust Remote Support (<=25.3.1), BeyondTrust Privileged Remote Access (<=24.3.4)

Associated actors

APT28 ×1 LockBit affiliate ×1 Lotus Blossom ×1 Russia ×1 Salt Typhoon ×1 UAT-8616 ×1 UNC3886 ×1 UNC6201 ×1

Recent reports

Exploits and vulnerabilities in Q1 2026

Kaspersky SecurelistMay 7 Critical

Uptick in Bomgar RMM Exploitation Leads to LockBit Ransomware Deployment

Huntress BlogApr 17 Critical

February 2026 CVE Landscape: 13 Critical Vulnerabilities, 43% Drop from January

Recorded Future InsiktMar 12 Critical

BeyondTrust Remote Support and Privileged Remote Access OS Command Injection Vulnerability (CVE-2026-1731)

NICS TaiwanFeb 26 Medium

Risky Business #824 — Microsoft's Secure Future is looking a bit wobbly

Risky BusinessFeb 11

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans