CVE-2026-40141
Critical
Description
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.
SeverityCritical
CVSS9.9
Exploit probability—
ProductBeyondtrust Privileged Remote Access
PublishedJul 6, 2026
First seenJul 6, 2026
Weakness typeCWE-943CWE-943
How to fix
Update
- beyondtrust privileged_remote_access25.3.3 or later
- beyondtrust remote_support25.3.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| beyondtrust privileged_remote_access | v < 25.3.3 | 25.3.3 |
| beyondtrust remote_support | v < 25.3.3 | 25.3.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.