Vulnerability · Published Jul 6, 2026 · Assigned by BT
CVE-2026-40141High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
High 8.5
In plain English
A high-severity security flaw in Privilege Remote Access from BeyondTrust. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Official description
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BeyondTrust | Remote Support | 0 – through 25.3.2 |
| BeyondTrust | Privilege Remote Access | 0 – through 25.3.2 |
Weakness: CWE-943 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H