IOC Passport

CVE-2026-1731

CVEArticle-derived observationCurrent reporting windowReported in 6 articlesWatch this →

A CVE identifier referenced in published reporting. It is vulnerability context, not a malicious indicator or feed verdict.

This value remains inside its 90-day contextual reporting window. Current reporting status is separate from verified-feed admission. Archive-cleared or archived does not mean clean, inactive, benign, remediated, resolved, or safe, and this lifecycle does not change current verified-feed admission.

Current verified-feed status

Checking live guard…

Article reporting and current malicious-feed admission are evaluated separately.

First reported: Jan 31, 2026
Last reported: Sep 30, 2026
Article count: 6
Admission policy: Context only
Research lifecycle: Current

Article reporting history

These dates are report publication dates, not provider sightings or proof of malicious activity.

General CTI·Sep 30, 2026

AI Is Turning Vulnerability Triage Into a Threat-Intel Problem

Cyber Security Blog·Jun 5, 2026

PAN-OS GlobalProtect Exploitation Shows VPN Access Needs Log Review, Not Just Patching

Cyber Security Blog·May 7, 2026

PAN-OS Captive Portal Zero-Day Shows Why Internet-Facing Edge Devices Need Immediate Review

Chinese Cyber Threat Intelligence·Feb 23, 2026

Unit 42 Exposes Active Exploitation of BeyondTrust CVE-2026-1731 with VShell and SparkRAT Backdoors

General CTI·Feb 14, 2026

CVE-2026-1731: Critical BeyondTrust Remote Support Vulnerability Under Active Exploitation

Operational Technology (OT)·Jan 31, 2026

Iconics Suite SCADA Vulnerability Enables Denial-of-Service Through Privileged File Operations

Related indicators

Observables that appear alongside this one in the same reporting. Co-occurrence can suggest shared infrastructure, but it does not establish common ownership, campaign identity, or actor attribution.

CVE-2023-33538 CVE-2025-0921 CVE-2025-14847 CVE-2025-23304 CVE-2025-55182 CVE-2025-66478 CVE-2026-0257 CVE-2026-0300 CVE-2026-1281 CVE-2026-1340 CVE-2026-22584 CVE-2026-314310ecc867ce916d01640d76ec03de24d1d23585eb582e9c48a0364c62a590548ac104[.]207[.]144[.]154134[.]122[.]13[.]34136[.]0[.]8[.]48138[.]197[.]14[.]95142[.]111[.]152[.]50144[.]172[.]103[.]200146[.]19[.]216[.]119146[.]19[.]216[.]120146[.]19[.]216[.]125146[.]70[.]100[.]69149[.]104[.]66[.]84155[.]2[.]215[.]64178[.]128[.]212[.]209179[.]43[.]146[.]42179[.]43[.]172[.]213185[.]195[.]232[.]139198[.]12[.]106[.]60202[.]144[.]192[.]4723[.]128[.]228[.]623[.]162[.]40[.]18737[.]19[.]221[.]18039uchxifap4cvgzsuirom0szrrg[.]d65lre9sfqnlcv49317gcis6pyjsatzho[.]oast[.]pro45[.]61[.]150[.]964762e944a0ce1f9aef243e11538f84f16b6f36560ed6e32dfd9a5f99e17e8e5064[.]31[.]28[.]22164[.]95[.]10[.]11566cceb2c2f1d9988b501832fd3b559775982e2fce4ab38fc4ffe71b74eafc726

Browse all indicators →IOC Archive →Machine-readable feeds →Extract IOCs from text →

CVE-2026-1731

The House-Of-L Brief.