CVE-2026-40141CWE-943

High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

High · published July 6, 2026

CVSS v4.0
8.5
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-943 · Improper Neutralization of Special Elements in Data Query Logic
Published
2026-07-06T16:13Z
EPSS history
Timeline
  • 06 JUL 16:13Z
    High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
    cvelistv5