Exposure to critical BeyondTrust flaw remains widespread

More than 190,000 exposed and trackable web properties were discovered by Censys to be vulnerable to a recently addressed critical flaw impacting BeyondTrust's Remote Support and Privileged Remote Access offerings, which could be leveraged for operating system command execution, Cybernews reports.

The U.S. accounted for over half of the 4,724 hosts exposed to the vulnerability, tracked as CVE-2026-1731, with Germany, Canada, France, Switzerland, and the Netherlands having the next highest number of exposures to the bug, according to Censys.

"No public PoCs are available at the time of writing, but the attack is straightforward to exploit, so it is important to patch as quickly as possible," said Censys.

Such findings come after nearly 11,000 internet-exposed BeyondTrust instances, almost 8,500 of which are on-prem, were noted to be susceptible to potential intrusions involving CVE-2026-1731 by Hacktron, which discovered the security issue through its AI-powered analysis technology.