{"id":214079,"date":"2026-02-16T07:33:00","date_gmt":"2026-02-16T12:33:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/16\/cisa-gives-feds-3-days-to-patch-actively-exploited-beyondtrust-flaw\/"},"modified":"2026-02-16T09:55:11","modified_gmt":"2026-02-16T14:55:11","slug":"cisa-gives-feds-3-days-to-patch-actively-exploited-beyondtrust-flaw","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/16\/cisa-gives-feds-3-days-to-patch-actively-exploited-beyondtrust-flaw\/","title":{"rendered":"CISA gives feds 3 days to patch actively exploited BeyondTrust flaw"},"content":{"rendered":"

CISA gives feds 3 days to patch actively exploited BeyondTrust flaw<\/a><\/p>\n

https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-orders-feds-to-patch-beyondtrust-flaw-within-three-days\/<\/a><\/p>\n

Publish Date: 2026-02-16 07:33:00<\/a><\/p>\n

Source Domain: www.bleepingcomputer.com<\/a><\/p>\n

\n

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered federal\u00a0agencies on Friday\u00a0to secure their BeyondTrust Remote Support instances against an actively exploited vulnerability within three days.<\/p>\n

BeyondTrust provides identity security services to more than 20,000 customers across over 100 countries, including government agencies and 75% of Fortune 100 companies worldwide.<\/p>\n

Tracked as CVE-2026-1731, this remote code execution vulnerability\u00a0stems\u00a0from an OS command injection weakness and\u00a0<\/span>affects BeyondTrust’s\u00a0Remote Support 25.3.1 or earlier and Privileged Remote Access 24.3.4 or earlier.<\/p>\n

\"Wiz\"<\/p>\n

While\u00a0BeyondTrust patched all Remote Support and Privileged Remote Access SaaS instances on February 2, 2026, on-premise customers must install patches manually.<\/p>\n

“Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user,” BeyondTrust said\u00a0when it patched the vulnerability\u00a0on February 6. “Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption.”<\/p>\n

Hacktron, who\u00a0discovered the vulnerability\u00a0and responsibly disclosed it to BeyondTrust on January 31, warned that approximately 11,000 BeyondTrust Remote Support instances were exposed online, around 8,500 of them being\u00a0on-premises deployments.<\/p>\n

On Thursday, six days after\u00a0BeyondTrust released CVE-2026-1731 security patches, watchTowr head of threat intelligence Ryan Dewhurst reported that attackers are now actively exploiting the security flaw,\u00a0warning admins that unpatched devices should be assumed to be compromised.<\/p>\n

Federal agencies ordered to patch immediately<\/h2>\n

One day later, CISA confirmed\u00a0Dewhurst’s report,\u00a0added\u00a0the vulnerability to its\u00a0Known Exploited Vulnerabilities (KEV) catalog,\u00a0and ordered<\/span>\u00a0Federal Civilian Executive Branch (FCEB) agencies to secure their…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

CISA gives feds 3 days to patch actively exploited BeyondTrust flaw https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-orders-feds-to-patch-beyondtrust-flaw-within-three-days\/ Publish Date: 2026-02-16…<\/p>\n","protected":false},"author":1,"featured_media":214080,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.bleepstatic.com\/content\/hl-images\/2026\/02\/16\/BeyondTrust.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,24,27],"class_list":["post-214079","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-cybersecurity","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214079"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=214079"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214079\/revisions"}],"predecessor-version":[{"id":214081,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214079\/revisions\/214081"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/214080"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=214079"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=214079"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=214079"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}