CVE-2026-40140Patch(beyondtrust / privileged_remote_access)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch beyondtrust privileged_remote_access systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting appliance availability.

beyondtrust CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.beyondtrust.com/trust-center/security-advisories/bt26-03

Weakness type (CWE)

CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

privileged_remote_access
remote_support

Threat summary

Patch or workaround signal is available
6 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 5 signals
Technical details provided in 5 signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-07-07); latest day: 2
6 total mentions across 4 days

Affected systems

Vendors

beyondtrust

Products

privileged_remote_accessremote_support

Deep dive

Activity timeline6 mentions / 4d

Signal classification2 categories

Patch

583.3%

Disclosure

116.7%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-06	1	Patch1
2026-07-07	2	Disclosure1Patch1
2026-07-08	1	Patch1
2026-07-09	2	Patch2

Full discourse6 posts

GovCERT.CZ@GOVCERT_CZ92d
Patch
🚨 Upozorňujeme na zranitelnosti v BeyondTrust Remote Support a Privileged Remote Access. V produktech RS a PRA byly identifikovány pre-autentizační chyby v autentizačním subsystému (CVE-2026-40138, CVE-2026-40139) způsobené nedostatečnou validací autentizačních dat a požadavků, které mohou umožnit neautentizovanému útočníkovi v síti obejít přístupové kontroly a získat neoprávněný přístup k zařízení včetně účtů s vyššími oprávněními; zneužitelnost těchto dvou chyb je podmíněna specifickou konfigurací autentizace. Zranitelnost CVE-2026-40140 vyplývá z nedostatečné validace vstupu od klienta a může vést k vyvolání stavu DoS, čímž může být ovlivněna dostupnost systému. Zranitelnost CVE-2026-40141 v komponentě webové aplikace způsobená nedostatečnou validací vstupů může autorizovanému útočníkovi s omezenými právy umožnit přístup k neautorizovaným zdrojům nebo datům; její zneužití je omezeno na účty se specifickými oprávněními. Celkově mohou chyby vést k obcházení autentizace, eskalaci přístupů, narušení integrity systému i dostupnosti služby. 📌Doporučujeme aktualizovat na Remote Support RS 25.3.3 a vyšší a Privileged Remote Access PRA 25.3.3 a vyšší.
Post summary
The notice details several pre‑authentication and input‑validation flaws in BeyondTrust RS and PRA products and strongly recommends updating to version 25.3.3 or later to mitigate the CVE‑2026‑40138 through CVE‑2026‑40141 vulnerabilities.
040711.1K
4.3K followersView on X
にゃん☆たく/takumi.a@taku888infinity92d
Disclosure
Critical BeyondTrust Authentication Flaws Expose Remote Support Appliances to Attacks https://gbhackers.com/critical-beyondtrust-authentication-flaws/ 『（直訳） CVE-2026-40138 – 重大度：クリティカル（CVSS 9.2）：RSおよびPRAにおける不適切な認証（CWE-287）により、認証されていない攻撃者が特定の構成下でアクセス制御を回避し、昇格されたアクセス権を取得できる可能性があります。 CVE-2026-40139 – 重大度：CVSS 9.2：リモートサポートにおける認証処理の欠陥（CWE-287）により、リモート攻撃者が認証を回避して特権アカウントにアクセスできる可能性があります。 CVE-2026-40140 – 高（CVSS 8.7）：制御不能なリソース消費（CWE-400）により、認証されていない攻撃者がサービス拒否状態を引き起こし、アプライアンスの可用性に影響を与える可能性があります。 CVE-2026-40141 – 高（CVSS 8.5）：不適切な入力無効化（CWE-943）により、認証済みの権限の低いユーザーが不正なデータやリソースにアクセスできる可能性があります。』
Post summary
The article announces several new BeyondTrust authentication flaws, detailing their severity and technical characteristics, but does not mention exploits, active attacks, or remediation steps.
000431.4K
11.8K followersView on X
Daily CyberSecurity@Daily_CyberSec93d
Patch
BeyondTrust patched a critical pre-authentication vulnerability (CVE-2026-40138, CVE-2026-40139, CVE-2026-40140). Update Remote Support instances now. #BeyondTrust #Vulnerability #CVE202640138 #CyberSecurity #RemoteSupport http://securityonline.info/cve-2026-40138-beyondtrust-pre-authentication-vulnerability/
Post summary
BeyondTrust has released a patch for three critical pre‑authentication vulnerabilities.
00051689
12.9K followersView on X
Clone Systems@CloneSystemsInc90d
Patch
BeyondTrust has released security updates for multiple vulnerabilities affecting Remote Support and Privileged Remote Access products. The flaws include CVE-2026-40138, CVE-2026-40139, CVE-2026-40140, and CVE-2026-40141, with severity scores reaching as high as 9.9. Successful exploitation could allow attackers to bypass access controls, gain unauthorized access, trigger denial of service conditions, or access resources and data beyond their authorized scope. For organizations using remote support or privileged access tools, this is not a patch to delay. These systems often sit close to sensitive administrative workflows, which makes them high value targets when vulnerabilities are left open. Affected users should update BeyondTrust Remote Support and BeyondTrust Privileged Remote Access to version 25.3.3 or later immediately. Privileged access tools are supposed to protect the keys to the kingdom. Make sure the lock itself is not the weak point. #BeyondTrust #PrivilegedAccessManagement #RemoteSupport #CVE202640138 #CVE202640139 #CVE202640140 #CVE202640141 #VulnerabilityManagement #PatchManagement #CyberRisk
Post summary
BeyondTrust has issued a patch for four high‑severity CVEs (CVE‑2026‑40138 to 40141) affecting its Remote Support and Privileged Remote Access products; administrators should update to version 25.3.3 or newer to mitigate the risks.
0002061
259 followersView on X
中島佑允(YusukeNakajima)@nakajimeeee92d
Patch
【脆弱性管理】BeyondTrustのリモートアクセス製品に認証バイパスの重大欠陥4件——過去に実被害があった製品ラインに再び高深刻度CVE BeyondTrustは、Remote Support（RS）およびPrivileged Remote Access（PRA）に存在する4件の脆弱性を修正したセキュリティアドバイザリを公開した。うち2件が認証前に悪用可能な重大欠陥であり、特定の認証設定が有効な環境では未認証の攻撃者が管理者権限を含むアカウントへ不正アクセス可能となる。 CVE-2026-40138（CVSS 9.2）はRS・PRA双方の認証サブシステムにおける認証データ検証不備、CVE-2026-40139（CVSS 9.2）はRSの認証リクエスト処理不備で、いずれも特定の認証設定が前提条件となる。CVE-2026-40140（CVSS 8.7）はネットワーク通信サブシステムへの入力検証不備によるDoS、CVE-2026-40141（CVSS 8.5）はRS・PRAのWebアプリコンポーネントにおける限定権限アカウントによる認可範囲外アクセスだ。BeyondTrustによれば、これらはClaude Opus 4.8を含むAIモデルと自社研究ツールを活用した内部セキュリティ評価で発見された。現時点で野外での悪用は確認されていない。ただし、同製品ラインにおけるCVE-2024-12356およびCVE-2026-1731は過去にWebシェル・バックドア展開に実際に悪用されており、攻撃者の高い関心を受け続ける製品であることを踏まえれば、RS 25.3.3・PRA 25.3.3への早急なアップデートが求められる。 https://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html
Post summary
The article announces a security advisory for four recent CVEs in BeyondTrust products, emphasizes the need for urgent UPDATES, and provides technical details but no PoC or exploitation evidence.
00020517
3.0K followersView on X
Meridian Group@MeridianEU90d
Patch
#BeyondTrust patches four vulnerabilities in Remote Support and PRA: CVE-2026-40138 and CVE-2026-40139 (CVSS 9.2) enable unauthenticated auth bypass including privileged account access. CVE-2026-40140 enables pre-auth DoS; CVE-2026-40141 authenticated authz bypass. #patchrelease https://t.co/v1UUkcsaJ3
Post summary
BeyondTrust released patches for four Remote Support vulnerabilities (CVE-2026-40138/39, 40140, 40141), detailing their severity and technical nature, with no PoC, exploit code, or active exploitation mentioned.
0000057
66 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	beyondtrust	privileged_remote_access	-	-	-
App	beyondtrust	remote_support	-	-	-

Explore more

Back to dashboard beyondtrust CVEs privileged_remote_access vulnerabilities

What researchers are saying

CVE-2026-40140

GovCERT.CZ[verified]@GOVCERT_CZPatch

The notice details several pre‑authentication and input‑validation flaws in BeyondTrust RS and PRA products and strongly recommends updating to version 25.3.3 or later to mitigate the CVE‑2026‑40138 through CVE‑2026‑40141 vulnerabilities.

にゃん☆たく/takumi.a[verified]@taku888infinityDisclosure

The article announces several new BeyondTrust authentication flaws, detailing their severity and technical characteristics, but does not mention exploits, active attacks, or remediation steps.

Clone Systems[verified]@CloneSystemsIncPatch

BeyondTrust has issued a patch for four high‑severity CVEs (CVE‑2026‑40138 to 40141) affecting its Remote Support and Privileged Remote Access products; administrators should update to version 25.3.3 or newer to mitigate the risks.

中島佑允(YusukeNakajima)[verified]@nakajimeeeePatch

The article announces a security advisory for four recent CVEs in BeyondTrust products, emphasizes the need for urgent UPDATES, and provides technical details but no PoC or exploitation evidence.

Daily CyberSecurity@Daily_CyberSecPatch

BeyondTrust has released a patch for three critical pre‑authentication vulnerabilities.

Meridian Group@MeridianEUPatch

BeyondTrust released patches for four Remote Support vulnerabilities (CVE-2026-40138/39, 40140, 40141), detailing their severity and technical nature, with no PoC, exploit code, or active exploitation mentioned.