VDB

GCVE-110-NCSC-2026-48

GCVE-110-NCSC-2026-48
Advisory Published
Vulnetix · Advisory published February 9, 2026
A critical pre-authentication remote code execution vulnerability in BeyondTrust Remote Support and older versions of Privileged Remote Access allows unauthenticated attackers to execute OS commands via specially crafted requests.
Download JSON Open in Console

Weaknesses (CWE)

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

VendorProductVersionsPlatforms
BeyondTrustvers:unknown/*——

Aliases

CVE-2026-1731

References

advisory
advisory
advisory

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›