IT Consultancy
IT Consultancy Get expert guidance to leverage technology for your business growth. We help you identify the right IT solutions, optimize infrastructure, and ensure your digital environment is secure,…
Active Exploitation of Critical BeyondTrust CVSS 9.9
Digital Marketing
Digital Marketing Grow your brand and reach the right audience with data-driven marketing strategies. We help you create campaigns that convert, manage social channels effectively, and optimize your d…
Privacy Policy
Privacy Policy At CometSoul, accessible from https://cometsoul.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collec…
Terms and Conditions
Welcome to CometSoul! These terms and conditions outline the rules and regulations for the use of CometSoul’s Website, located at https://cometsoul.com. By accessing this website we assume you a…
Disclaimer
If you require any more information or have any questions about our site’s disclaimer, please feel free to contact us. Disclaimers for CometSoul All the information on this website – https…
Managed Wi-Fi Service
Managed Wi-Fi Service Build a fast, stable, and secure Wi-Fi for your business at Zero depreciation cost. Enterprise-Grade Guest Wi-Fi With $0 Upfront Hardware Costs. We provide, install, and support …
Smart Business System Integrator
Smart Business System Integrator Simplify your daily operations with smart systems that automate bookings, schedules, and routine tasks so you can focus on growing your business. We set up and integra…
IT Procurement & Hardware Managed Service
IT Procurement & Hardware Managed Service Keep your technology running smoothly from the hardware you use every day to the systems that power your business. We provide end-to-end IT management so …
Security researchers have confirmed active exploitation of a critical vulnerability affecting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA). The flaw, tracked as CVE-2026-1731, carries a CVSS score of 9.9 and allows unauthenticated remote code execution.
According to watchTowr, attackers are abusing the get_portal_info function to extract sensitive values before establishing a WebSocket connection. Successful exploitation can lead to unauthorized access, data theft, and service disruption.
Security fixes are already available:
- Remote Support — Patch BT26-02-RS (v21.3–25.3.1)
- Privileged Remote Access — Patch BT26-02-PRA (v22.1–24.X)
- PRA version 25.1+ is not affected
The vulnerability has also been added to the KEV catalog by CISA, highlighting real-world risk.
Bottom line:
Organizations should patch immediately, restrict external access to BeyondTrust portals, and monitor for suspicious activity to reduce the risk of compromise.
source: https://thehackernews.com/2026/02/researchers-observe-in-wild.html