Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access CVE-2026-1731

Name: Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access CVE-2026-1731
Rating: 5 (161 reviews)

2026-03-22 | CVSS 9.9

## https://sploitus.com/exploit?id=F98517BC-30FE-51A4-9E99-63A8D2F0BBDC
# BeyondTrust CVE-2026-1731 PoC

### Overview
A Python-based security research tool for identifying and verifying **CVE-2026-1731** (Pre-auth RCE) in BeyondTrust Remote Support systems.

### Features
* **Automated Discovery:** Extracts Organization IDs from `/get_portal_info`.
* **Asynchronous Execution:** Scans multiple targets using `asyncio`.
* **WebSocket Injection:** Tests command execution via `websocat`.

### Requirements
* Python 3.8+
* `websocat` installed in `$PATH`
* `requests` & `urllib3` libraries