CVE-2026-40141

High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

State: Published
Severity: 8.5 High
Published: Jul 6, 2026
Updated: Jul 7, 2026
Reserved: Apr 9, 2026

Description

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H	BT

Weaknesses

CWE-943 Improper Neutralization of Special Elements in Data Query Logic

Affected Products

Product	Versions
Remote SupportBeyondTrust	25.3.2 and earlierAffected
Privilege Remote AccessBeyondTrust	25.3.2 and earlierAffected

References

https://www.beyondtrust.com/trust-center/security-advisories/bt26-03

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.