WID-SEC-W-2026-2215

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

BeyondTrust Privileged Remote Access und Remote Support: Mehrere Schwachstellen

view advisory published 2026-07-06

Ein Angreifer kann mehrere Schwachstellen in BeyondTrust Privileged Remote Access und BeyondTrust Remote Support ausnutzen, um einen Denial of Service Angriff durchzuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2026-40141UScritical9.9—
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters…
CVE-2026-40140UShigh7.5—
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of…
CVE-2026-40139UScritical9.8—
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauth…
CVE-2026-40138UShigh8.1—
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan