sign in--:--:--UTC

CVE-2026-1731

exploited in the wild☆ pin

CVSS

9.8

Reports

10

First seen

Feb 11, 2026

Last seen

Oct 16, 2026

Affected product

BeyondTrust Remote Support and Privileged Remote Access

Associated actors

Silk Typhoon ×2 Armory Castle ×1 LockBit affiliate ×1 Lotus Blossom ×1 Russia ×1 Salt Typhoon ×1 UAT-8616 ×1 UNC3886 ×1 APT28 ×1 UNC6201 ×1

Recent reports

BeyondTrust patches zero-day exploited in attacks since August

Bleeping ComputerOct 16, 2026 High

Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation

The Record (Recorded Future News)Sep 30, 2026 High

Exploits and vulnerabilities in Q2 2026

Kaspersky SecurelistAug 26, 2026 Critical

BeyondTrust warns of critical flaws in remote access software

Bleeping ComputerJul 7, 2026 Critical

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

The Hacker NewsJul 7, 2026 High

Exploits and vulnerabilities in Q1 2026

Kaspersky SecurelistMay 7, 2026 Critical

Uptick in Bomgar RMM Exploitation Leads to LockBit Ransomware Deployment

Huntress BlogApr 17, 2026 Critical

February 2026 CVE Landscape: 13 Critical Vulnerabilities, 43% Drop from January

Recorded Future InsiktMar 12, 2026 Critical

BeyondTrust Remote Support and Privileged Remote Access OS Command Injection Vulnerability (CVE-2026-1731)

NICS TaiwanFeb 26, 2026 Medium

Risky Business #824 — Microsoft's Secure Future is looking a bit wobbly

Risky BusinessFeb 11, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans