CVE-2026-40141 HIGH

CVE-2026-40141: High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

Vendor Beyondtrust
Product Remote Support
Weakness CWE-943
Published July 6, 2026
Last update July 7, 2026

CVSS base score

8.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

What the vulnerability does

01Description

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

Key dates

02Disclosure timeline

July 6, 2026 CVE published
July 7, 2026 Record updated