Esecurityplanet Critical Vulnerabilities in .NET and BeyondTrust Allow Remote Code Execution
Article Content
- •CVE-2026-96237 affects .NET versions 8.0, 9.0, and 10.0 with a CVSS of 7.5.
- •CVE-2026-1731 in BeyondTrust products allows unauthenticated remote code execution with a CVSS of 9.9.
- •Immediate action is required for both vulnerabilities to prevent potential exploitation.
Two significant vulnerabilities have been reported recently. CVE-2026-96237, a .NET Remote Code Execution vulnerability, affects systems running .NET 8.0, 9.0, or 10.0 and has a CVSS score of 7.5. Exploitation is deemed less likely due to high attack complexity and required user interaction. In contrast, CVE-2026-1731 in BeyondTrust products allows unauthenticated attackers to execute arbitrary commands with a CVSS score of 9.9, making it critical. This flaw impacts BeyondTrust Remote Support and Privileged Remote Access systems, enabling full control without authentication. Both vulnerabilities require prompt attention from affected organizations to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track CVE-2026-1731 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which .NET versions are affected?
Is CVE-2026-1731 being exploited?
What should organizations do?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency Patches Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed on October 21, 2026, allowing unauthenticated remote code execution (RCE). The vulnerabilities, collectively known as PHP2Shell, affect all PHP installations serving web requests, including popular platforms like…