Vulnerability

Leica Biosystems flags BeyondTrust remote support flaw CVE-2026-1731

MedDevice Cyber Staff · Feb 6 · 2 min read · Via Leica Biosystems product security advisories

Leica Biosystems posted an advisory on February 6, 2026 after being notified of CVE-2026-1731, a critical pre-authentication remote code execution vulnerability in BeyondTrust's Remote Support (RS) and Privileged Remote Access (PRA) software. The company filed it under the heading Remote Service.

Pre-authentication remote code execution means an attacker who can reach the service runs code without logging in first. In a remote support product that is the worst place for it, because the tool exists to open privileged sessions into other machines.

The index entry does not say which Leica Biosystems products or service workflows depend on BeyondTrust. Labs that grant the vendor remote access should ask which path it uses and whether that path has been patched.

Are you a representative of Leica Biosystems? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

CVE-2026-1731 is a critical pre-authentication remote code execution flaw in BeyondTrust Remote Support and Privileged Remote Access, flagged by Leica Biosystems on February 6, 2026. The index entry names no affected Leica Biosystems product or fix. Confirm whether vendor remote service to your lab runs through BeyondTrust and that the appliance is patched.

Identify the remote path. Ask Leica Biosystems which remote service tool it uses to reach your instruments and servers.
Confirm the patch. Get written confirmation that any BeyondTrust RS or PRA instance in that path is fixed for CVE-2026-1731.
Gate vendor sessions. Require lab approval for each remote session and log who connected and when.
Track the dependency. Record BeyondTrust as a third-party component of the vendor's service model.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Remote access Off-the-shelf software

Remote Support and Privileged Remote Access

Remote access

Fix the class in your product

The advisory is not for a bug you wrote; it is in a component you embed. As the maker, pin dependencies to fixed versions, generate an SBOM on every build including transitive components, and gate the pipeline on known-vulnerable components so an advisory maps to your products automatically.

Pin and inventory. Exact versions, and a CycloneDX or SPDX SBOM as a build artifact including transitive deps.
Gate on advisories. A CI scan fails a release carrying a component with a known advisory.
Own the field patch path. Know how you deliver a dependency or platform patch to fielded devices before you need it.

Mapped EMB3D mitigations

Questions & Answers

What is CVE-2026-1731 in the Leica Biosystems remote service advisory?

CVE-2026-1731 is a critical pre-authentication remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) software, which Leica Biosystems flagged in an advisory dated February 6, 2026.

Who makes the software named in the Leica Biosystems CVE-2026-1731 notice?

BeyondTrust makes the Remote Support (RS) and Privileged Remote Access (PRA) software affected by CVE-2026-1731, according to the Leica Biosystems advisory of February 6, 2026.

← Back to Vulnerabilities