Tag

#command-injection

1 post tagged #command-injection.

Analysis · May 5, 2026 · The Field Notes Desk

BeyondTrust RS/PRA hit again. Same endpoint, same bug class, 15 months later.

The researcher who found CVE-2026-1731 did it by asking one question about the December 2024 fix: did the same pattern exist elsewhere? It did. Third critical BeyondTrust RCE in 15 months, confirmed ransomware, CISA gave you 3 days.