Vulnerability Report

CVE-2026-40141

RCE

Title: Insufficient input validation in BeyondTrust web component

RCE

Proof Of Concept

No public PoC currently indexed for CVE-2026-40141.

CWE Category CWE-943

Published Date Jul 06, 2026

Modified Date Jul 07, 2026

Exploit Status Not Found

Score 8.5 CVSS v4.0

Exploit Probability (EPSS)

0.53%

Vulnerability Summary

CVE-2026-40141: A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

Impacted Vendors

beyondtrust 2

Reference Links

https://www.beyondtrust.com/trust-center/security-advisories/bt26-03

CVSS v4.0

Source Entity 13061848-ea10-403d-bd75-c83a022c2891

Severity HIGH

8.5

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

N/A

RAW VECTOR

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

Source Entity [email protected]

Severity CRITICAL

9.9