Beyondtrust Privileged Remote Access — CVE-2026-40141 (Critical)

Date Jul 6, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Beyondtrust · Privileged Remote Access

CVE CVE-2026-40141

Critical vendor advisory CVE-2026-40141

Summary

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.9) in Beyondtrust Privileged Remote Access. Patch or mitigate promptly. EPSS percentile: 33%.

Operator check

Review CVE-2026-40141 in your asset inventory. Apply patches per vendor guidance and verify Privileged Remote Access is not exposed. CVSS score: 9.9. EPSS probability: 0.4%; percentile: 33%.

Sources

NVD — CVE-2026-40141 Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed