Skip to content
NewA calmer, faster ZeroHour
Vulnerability4

CVE-2026-40141

CVSS 4.0
8.5 high
EPSS
<1%p43
Published
·
Modified
Analyze CVE-2026-40141 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

Vendors
beyondtrust
Products
privileged remote access, remote support
Weakness
CWE-943
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

2 stories