CVE-2026-40140
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
A vulnerability in BeyondTrust Remote Support and Privileged Remote Access allows an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition due to insufficient validation of client-supplied input in the network communication subsystem.
Risk Assessment
The attack can disrupt appliance availability, preventing remote support and privileged access, leading to operational downtime and potential financial losses.
Recommendation
Immediately apply the patch provided by BeyondTrust and restrict network interface access to trusted IP addresses only.
Original NVD description (English source)
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting appliance availability.