CVE-2026-40140 — High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

CVE-2026-40140

High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access PUBLISHED

Description (CNA)

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting appliance availability.

Affected (CNA)

Vendor / product	Versions
BeyondTrust / Remote Support	affected 0 through 25.3.2
BeyondTrust / Privileged Remote Access	affected 0 through 25.3.2

CWE

CWE-400

References

https://www.beyondtrust.com/trust-center/security-advisories/bt26-03

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.