Critical RCE Vulnerability in BeyondTrust Remote Support and PRA

A critical pre-authentication remote code execution vulnerability, CVE-2026-1731, has been identified in BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA). This vulnerability allows unauthenticated remote attackers to execute operating system commands by sending specially crafted requests. Users of these affected products are advised to take immediate action to mitigate the risk.