CVE-2026-40141: falha de alta gravidade em BeyondTrust Remote Support
High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.
ssvc Trackcvss 8.5epss 0.5%
Alerta oficial no Brasil
O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.
- CISC Gov.br · 14 jul 2026Boletim do CISC de Vulnerabilidadeler no gov.br ↗
Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H
CVEs relacionadas — BeyondTrust Remote Support
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12356CRITICALCommand Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)EPSS 87.4%KEVCVE-2026-102764CRITICALImproper Origin Validation in Internal Messaging Components of BeyondTrust Remote SupportEPSS 78.0%KEVCVE-2026-40139CRITICALCritical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote AccessEPSS 0.8%CVE-2026-40140HIGHHigh-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote AccessEPSS 0.6%CVE-2026-40138CRITICALCritical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote AccessEPSS 0.5%