Supply ChainApr 21, 2026
Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk
Critical RCE vulnerability in Bomgar RMM tool exploited to deploy ransomware.
Summary
A critical remote code execution flaw (CVE-2026-1731) in Bomgar's remote monitoring and management platform is being actively exploited to spread ransomware and compromise supply chains. The vulnerability allows attackers to gain unauthorized access to systems and pivot across connected infrastructure, presenting a significant risk to organizations relying on the tool for IT operations.
Indicators of Compromise
- cve — CVE-2026-1731
Entities
Bomgar RMM (product)Remote Monitoring and Management (RMM) (technology)