CVE-2026-40141 — High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

CVE-2026-40141

High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access PUBLISHED

Description (CNA)

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

Affected (CNA)

Vendor / product	Versions
BeyondTrust / Remote Support	affected 0 through 25.3.2
BeyondTrust / Privilege Remote Access	affected 0 through 25.3.2

CWE

CWE-943

References

https://www.beyondtrust.com/trust-center/security-advisories/bt26-03

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.