1. Home
  2. CVE Database
  3. CVE-2026-40141
CRITICAL · 9.9

CVE-2026-40141

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient valid...

Vulnerability Description

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

CVSS Score

9.9

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
BeyondtrustPrivileged Remote Access< 25.3.3
BeyondtrustRemote Support< 25.3.3

Related Weaknesses (CWE)

CWE-943

References

FAQ

What is CVE-2026-40141?

CVE-2026-40141 is a vulnerability with a CVSS score of 9.9 (CRITICAL). A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient valid...

How severe is CVE-2026-40141?

CVE-2026-40141 has been rated CRITICAL with a CVSS base score of 9.9/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-40141?

Check the references section above for vendor advisories and patch information. Affected products include: Beyondtrust Privileged Remote Access, Beyondtrust Remote Support.