high7.5
CVE-2026-40140
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem.
Impact
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting appliance availability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beyondtrust | Privileged Remote Access | before 25.3.3 |
| Beyondtrust | Remote Support | before 25.3.3 |