{"id":38966,"date":"2026-03-21T07:08:45","date_gmt":"2026-03-21T07:08:45","guid":{"rendered":"https:\/\/fidelissecurity.com\/?post_type=vulnerabilities&#038;p=38966"},"modified":"2026-03-21T07:10:51","modified_gmt":"2026-03-21T07:10:51","slug":"cve-2026-1731","status":"publish","type":"vulnerabilities","link":"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-1731\/","title":{"rendered":"CVE-2026-1731"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"38966\" class=\"elementor elementor-38966\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"vulnerabilities\">\n\t\t\t\t<div class=\"elementor-element elementor-element-10f184a e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"10f184a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0e2ebbc elementor-widget elementor-widget-heading\" data-id=\"0e2ebbc\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"summary\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Summary<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0352243 elementor-widget elementor-widget-text-editor\" data-id=\"0352243\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>CVE-2026-1731 is a critical pre-authentication RCE in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA). It allows attackers to run system commands without authentication, risking full compromise. It affects RS 25.3.1 and earlier and PRA 24.3.4 and earlier. Patches are available and should be applied immediately.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0b3f860 elementor-widget elementor-widget-heading\" data-id=\"0b3f860\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"actions-required\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Urgent Actions Required<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e58d2d elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"8e58d2d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Immediately apply vendor patches to affected BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) systems.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Upgrade Remote Support to 25.3.2+ or apply the BT26-02-RS patch.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Upgrade Privileged Remote Access to 25.1+ or apply the BT26-02-PRA patch.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">If patching is delayed, restrict management interfaces using firewall rules or IP allowlists.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Remove externally exposed instances from the internet until updates are applied.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Review logs for suspicious or unauthorized access activity.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-431855e e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"431855e\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e6059c5 elementor-widget elementor-widget-heading\" data-id=\"e6059c5\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"vulnerable-systems\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Which Systems Are Vulnerable to\u202fCVE-2026-1731?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-91f5818 elementor-widget elementor-widget-heading\" data-id=\"91f5818\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Technical Overview<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d261fe2 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"d261fe2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Vulnerability Type:<\/b>\u202fOS Command Injection leading to Pre-Authentication Remote Code Execution (CWE-78)<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Affected Software\/Versions:<\/b> <ul> <li><b>BeyondTrust Remote Support<\/b><br> Versions 25.3.1 and earlier<\/li> <li><b>BeyondTrust Privileged Remote Access<\/b><br> Versions 24.3.4 and earlier<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>CVSS Vector:\u202fv4.0<\/b> <ul> <li>Attack Vector (AV): Network<\/li> <li>Attack Complexity (AC): Low<\/li> <li>Attack Requirements (AT): None<\/li> <li>Privileges Required (PR): None<\/li> <li>User Interaction (UI): None<\/li> <li>Vulnerable System Confidentiality (VC): High<\/li> <li>Vulnerable System Integrity (VI): High<\/li> <li>Vulnerable System Availability (VA): High<\/li> <li>Subsequent System Confidentiality (SC): Low<\/li> <li>Subsequent System Integrity (SI): High<\/li> <li>Subsequent System Availability (SA): Low<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Patch Availability:<\/b>\u202fYes, available<br><a href=\"https:\/\/www.beyondtrust.com\/trust-center\/security-advisories\/bt26-02\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">BT26-02 | BeyondTrust<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-496d048 e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"496d048\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-759b53d elementor-widget elementor-widget-heading\" data-id=\"759b53d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How Does the\u202fCVE-2026-1731 Exploit Work?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0e9e9cb elementor-widget elementor-widget-text-editor\" data-id=\"0e9e9cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The attack typically follows these steps:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b05bab elementor-widget elementor-widget-image\" data-id=\"2b05bab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"900\" height=\"942\" src=\"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731.webp\" class=\"attachment-full size-full wp-image-38967\" alt=\"CVE-2026-1731\" srcset=\"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731.webp 900w, https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731-287x300.webp 287w, https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731-768x804.webp 768w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a93a1eb elementor-widget elementor-widget-heading\" data-id=\"a93a1eb\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"mitigate\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Causes\u202fCVE-2026-1731?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7275c12 elementor-widget elementor-widget-text-editor\" data-id=\"7275c12\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em><strong>Vulnerability Root Cause:<\/strong><\/em>\u202f\u202f\u202f<\/p><p>This vulnerability is caused by improper handling of system commands in BeyondTrust products. Classified as OS command injection (CWE-78), it allows attackers to send crafted requests that execute system commands without authentication, potentially compromising the affected system.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e1e32da elementor-widget elementor-widget-heading\" data-id=\"e1e32da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How Can You Mitigate\u202fCVE-2026-1731?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4f81845 elementor-widget elementor-widget-text-editor\" data-id=\"4f81845\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>If immediate patching is delayed or not possible:<\/p><ul><li>Limit access to management interfaces using firewall rules or IP allowlists.<\/li><li>Remove internet access to exposed instances until updates are applied.<\/li><li>Review logs for unusual activity or unauthorized access.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-048e63e elementor-widget elementor-widget-heading\" data-id=\"048e63e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Which Assets and Systems Are at Risk?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a622920 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"a622920\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Asset Types Affected:<\/b> <ul> <li><b>Remote Support Platforms \u2013<\/b> BeyondTrust Remote Support running vulnerable versions<\/li> <li><b>Privileged Access Systems \u2013<\/b> BeyondTrust Privileged Remote Access deployments<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Business-Critical Systems at Risk:<\/b> <ul> <li><b>IT Support Systems \u2013<\/b> Platforms used for remote device access and troubleshooting<\/li> <li><b>Privileged Access Systems \u2013<\/b> Platforms managing remote administrative access<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Exposure Level:<\/b> <ul> <li><b>Internet-accessible instances -<\/b> Systems exposed externally are at higher risk if not updated.<\/li> <li><b>Self-hosted deployments -<\/b> Instances requiring manual patching remain vulnerable until updates are applied.<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3474d9c elementor-widget elementor-widget-heading\" data-id=\"3474d9c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Will Patching\u202fCVE-2026-1731 Cause Downtime?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-20b1149 elementor-widget elementor-widget-text-editor\" data-id=\"20b1149\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Patch application impact:\u202f<\/strong>Low. Apply vendor patches or upgrade to fixed versions. SaaS instances were already patched; self-hosted systems require manual updates.<\/p><p><strong>Mitigation (if immediate patching is not possible):<\/strong>\u202fRestrict management access with firewall rules or IP allowlists and remove internet exposure until patched.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ca566b1 elementor-widget elementor-widget-heading\" data-id=\"ca566b1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How Can You Detect\u202fCVE-2026-1731 Exploitation?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3af05b1 elementor-widget elementor-widget-heading\" data-id=\"3af05b1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Exploitation Signatures:<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a539b10 elementor-widget elementor-widget-text-editor\" data-id=\"a539b10\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Unusual activity targeting BeyondTrust Remote Support or Privileged Remote Access systems may indicate exploitation attempts.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-221fc5e elementor-widget elementor-widget-heading\" data-id=\"221fc5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Indicators of Compromise (IOCs\/IOAs):<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f737893 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"f737893\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Unauthorized access to BeyondTrust systems without valid authentication.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Execution of unexpected operating system commands on affected hosts.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Signs of data access, <a href=\"https:\/\/fidelissecurity.com\/threatgeek\/data-protection\/data-exfiltration\/\">data exfiltration<\/a>, or service disruption.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dcbae36 elementor-widget elementor-widget-heading\" data-id=\"dcbae36\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Behavioral\u202fIndicators:\u202f<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a186984 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"a186984\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Suspicious activity appearing in the system or access logs.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Evidence of unauthorized system access or abnormal operations performed by the site user.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9a751ff elementor-widget elementor-widget-heading\" data-id=\"9a751ff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Alerting Strategy:<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2280585 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"2280585\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Priority:<\/b> Critical<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Trigger alerts for:<\/b> <ul> <li>Unauthorized access attempts against BeyondTrust RS or PRA instances.<\/li> <li>Abnormal system commands or unusual activity recorded in system logs.<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ccf3cc elementor-widget elementor-widget-heading\" data-id=\"1ccf3cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Remediation &amp; Response<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-839aa54 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"839aa54\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Remediation Timeline:<\/b> <ul> <li>Immediate: Apply patches or upgrade to fixed versions.<\/li> <li>If delayed: Restrict management access with firewall rules or IP allowlists.<\/li> <li>Short term: Review logs for suspicious or unauthorized activity.<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Incident Response Considerations:<\/b> <ul> <li>Isolate affected systems if signs of compromise are detected.<\/li> <li>Investigate logs for unauthorized access, abnormal commands, or suspicious activity.<\/li> <li>Apply patches and monitor systems for further exploitation attempts.<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a7a3f49 e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"a7a3f49\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f5dcd9e keepExploring elementor-widget elementor-widget-related_posts\" data-id=\"f5dcd9e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"related_posts.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <div id=\"widget-related-posts\" class=\"related-posts-widget-wrapper\">\r\n            <div class=\"related-posts-wrapper\">\r\n\r\n                                    <h3>Keep Exploring<\/h3>\r\n                \r\n                                    <p>Detailed insights into critical and emerging CVEs<\/p>\r\n                \r\n                <div class=\"ecs-posts elementor-posts-container elementor-posts\"><ul class=\"related-posts-list\" style=\"list-style:none;padding:0;\"><li style=\"margin-bottom:10px;\"><a href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-44756\/\">CVE-2026-44756<\/a><\/li><li style=\"margin-bottom:10px;\"><a href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-55040\/\">CVE-2026-55040<\/a><\/li><li style=\"margin-bottom:10px;\"><a href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-68820\/\">CVE-2026-68820<\/a><\/li><li style=\"margin-bottom:10px;\"><a href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-65791\/\">CVE-2026-65791<\/a><\/li><li style=\"margin-bottom:10px;\"><a href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-62878\/\">CVE-2026-62878<\/a><\/li><li style=\"margin-bottom:10px;\"><a href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-58231\/\">CVE-2026-58231<\/a><\/li><li style=\"margin-bottom:10px;\"><a href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-65400\/\">CVE-2026-65400<\/a><\/li><li style=\"margin-bottom:10px;\"><a href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-63077\/\">CVE-2026-63077<\/a><\/li><\/ul><\/div>\r\n            <\/div>\r\n        <\/div>\r\n        \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-29f0fef e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"29f0fef\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fd79500 elementor-widget elementor-widget-heading\" data-id=\"fd79500\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"resources\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\">References:<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3bdf004 elementor-widget elementor-widget-text-editor\" data-id=\"3bdf004\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ol><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-1731\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">NVD &#8211; CVE-2026-1731<\/a><\/li><li><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-1731\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">CVE Record: CVE-2026-1731<\/a><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>CVE-2026-1731 is a critical flaw in BeyondTrust Remote Support and BeyondTrust Privileged Remote Access that allows attackers to run commands without authentication, risking system compromise. It is actively exploited and requires immediate patching.<\/p>\n","protected":false},"featured_media":38967,"template":"","severity":[1483],"vuln_year":[1524],"class_list":["post-38966","vulnerabilities","type-vulnerabilities","status-publish","has-post-thumbnail","hentry","severity-critical","vuln_year-1524"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-1731: Critical BeyondTrust RCE Alert | Fidelis Security<\/title>\n<meta name=\"description\" content=\"Critical CVE-2026-1731 flaw in BeyondTrust enables unauthenticated command execution. Actively exploited\u2014patch now to prevent system compromise.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-1731\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-1731: Critical BeyondTrust RCE Alert | Fidelis Security\" \/>\n<meta property=\"og:description\" content=\"Critical CVE-2026-1731 flaw in BeyondTrust enables unauthenticated command execution. Actively exploited\u2014patch now to prevent system compromise.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/\" \/>\n<meta property=\"og:site_name\" content=\"Fidelis Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/fideliscyber\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-21T07:10:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"900\" \/>\n\t<meta property=\"og:image:height\" content=\"942\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@FidelisCyber\" \/>\n<meta name=\"twitter:label1\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/vulnerabilities\\\/cve-2026-1731\\\/\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-1731\\\/\",\"name\":\"CVE-2026-1731: Critical BeyondTrust RCE Alert | Fidelis Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-1731\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-1731\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/CVE-2026-1731.webp\",\"datePublished\":\"2026-03-21T07:08:45+00:00\",\"dateModified\":\"2026-03-21T07:10:51+00:00\",\"description\":\"Critical CVE-2026-1731 flaw in BeyondTrust enables unauthenticated command execution. Actively exploited\u2014patch now to prevent system compromise.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-1731\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-1731\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-1731\\\/#primaryimage\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/CVE-2026-1731.webp\",\"contentUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/CVE-2026-1731.webp\",\"width\":900,\"height\":942,\"caption\":\"CVE-2026-1731\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-1731\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilities\",\"item\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/vulnerabilities\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CVE-2026-1731\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\",\"name\":\"Fidelis Security\",\"description\":\"Unified Threat Detection and Response Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#organization\"},\"alternateName\":\"Fidelis\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#organization\",\"name\":\"Fidelis Security\",\"alternateName\":\"Fidelis\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fidelis-Security-Logo-SVG.svg\",\"contentUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fidelis-Security-Logo-SVG.svg\",\"width\":500,\"height\":500,\"caption\":\"Fidelis Security\"},\"image\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/fideliscyber\\\/\",\"https:\\\/\\\/x.com\\\/FidelisCyber\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/fideliscybersecurity\",\"https:\\\/\\\/www.youtube.com\\\/c\\\/FidelisCybersecurity\",\"https:\\\/\\\/www.gartner.com\\\/reviews\\\/market\\\/network-detection-and-response\\\/vendor\\\/fidelis-security\",\"https:\\\/\\\/www.g2.com\\\/sellers\\\/fidelis-cybersecurity#profiles\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-1731: Critical BeyondTrust RCE Alert | Fidelis Security","description":"Critical CVE-2026-1731 flaw in BeyondTrust enables unauthenticated command execution. Actively exploited\u2014patch now to prevent system compromise.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-1731\/","og_locale":"es_ES","og_type":"article","og_title":"CVE-2026-1731: Critical BeyondTrust RCE Alert | Fidelis Security","og_description":"Critical CVE-2026-1731 flaw in BeyondTrust enables unauthenticated command execution. Actively exploited\u2014patch now to prevent system compromise.","og_url":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/","og_site_name":"Fidelis Security","article_publisher":"https:\/\/www.facebook.com\/fideliscyber\/","article_modified_time":"2026-03-21T07:10:51+00:00","og_image":[{"width":900,"height":942,"url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_site":"@FidelisCyber","twitter_misc":{"Tiempo de lectura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-1731\/","url":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/","name":"CVE-2026-1731: Critical BeyondTrust RCE Alert | Fidelis Security","isPartOf":{"@id":"https:\/\/fidelissecurity.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/#primaryimage"},"image":{"@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/#primaryimage"},"thumbnailUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731.webp","datePublished":"2026-03-21T07:08:45+00:00","dateModified":"2026-03-21T07:10:51+00:00","description":"Critical CVE-2026-1731 flaw in BeyondTrust enables unauthenticated command execution. Actively exploited\u2014patch now to prevent system compromise.","breadcrumb":{"@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/#primaryimage","url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731.webp","contentUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/03\/CVE-2026-1731.webp","width":900,"height":942,"caption":"CVE-2026-1731"},{"@type":"BreadcrumbList","@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-1731\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/fidelissecurity.com\/es\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilities","item":"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/"},{"@type":"ListItem","position":3,"name":"CVE-2026-1731"}]},{"@type":"WebSite","@id":"https:\/\/fidelissecurity.com\/es\/#website","url":"https:\/\/fidelissecurity.com\/es\/","name":"Fidelis Security","description":"Unified Threat Detection and Response Platform","publisher":{"@id":"https:\/\/fidelissecurity.com\/es\/#organization"},"alternateName":"Fidelis","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fidelissecurity.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/fidelissecurity.com\/es\/#organization","name":"Fidelis Security","alternateName":"Fidelis","url":"https:\/\/fidelissecurity.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/fidelissecurity.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/08\/Fidelis-Security-Logo-SVG.svg","contentUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/08\/Fidelis-Security-Logo-SVG.svg","width":500,"height":500,"caption":"Fidelis Security"},"image":{"@id":"https:\/\/fidelissecurity.com\/es\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/fideliscyber\/","https:\/\/x.com\/FidelisCyber","https:\/\/www.linkedin.com\/company\/fideliscybersecurity","https:\/\/www.youtube.com\/c\/FidelisCybersecurity","https:\/\/www.gartner.com\/reviews\/market\/network-detection-and-response\/vendor\/fidelis-security","https:\/\/www.g2.com\/sellers\/fidelis-cybersecurity#profiles"]}]}},"_links":{"self":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vulnerabilities\/38966","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vulnerabilities"}],"about":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/types\/vulnerabilities"}],"version-history":[{"count":0,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vulnerabilities\/38966\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/media\/38967"}],"wp:attachment":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/media?parent=38966"}],"wp:term":[{"taxonomy":"severity","embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/severity?post=38966"},{"taxonomy":"vuln_year","embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vuln_year?post=38966"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}