Vigie VulnDBEuropean-hosted Vulnerability DB

CVE-2026-40141

High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

En bref

Sévérité
HIGH 8.5
EPSS
EPSS 0.53 % · centile 45 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
BT
Statut NVD
Analyzed

Description

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to access unintended resources or data beyond their authorization scope. Exploitation is restricted to accounts with specific permissions.

Scores

VersionScoreVecteurÉvalué par
CVSS 4.0HIGH 8.5CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:HBT
CVSS 4.0HIGH 8.5CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · 13061848-ea10-403d-bd75-c83a022c2891 (Secondary)
CVSS 3.1CRITICAL 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

Références européennes

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
BeyondTrust · Remote Supportaffected 0 ≤ 25.3.2
BeyondTrust · Privilege Remote Accessaffected 0 ≤ 25.3.2

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD