Skip to content
OpenAdvisories
High WID-SEC-2026-2215 4 CVEs

BeyondTrust Privileged Remote Access und Remote Support: Mehrere Schwachstellen

Published Jul 6, 2026 · Updated Jul 7, 2026 · Revision 2 · de-DE

Vendor: BeyondTrust Product: Privileged Remote Access Product: Remote Support Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in BeyondTrust Privileged Remote Access und BeyondTrust Remote Support ausnutzen, um einen Denial of Service Angriff durchzuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.

Product

BeyondTrust Privileged Remote Access (PRA) bietet privilegierten Benutzern und externen Anbietern sicheren, überwachten Zugriff auf kritische Systeme und IT-Infrastrukturen.
BeyondTrust Remote Support (RS) ermöglicht IT-Teams und Dienstleistern sicheren, interaktiven Fernzugriff zur Unterstützung von Endbenutzern

Vulnerabilities 4

  • Critical 9.2
    CVE-2026-40138

    Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gai…

    BeyondTrust Remote Support Privileged Remote Access
  • Critical 9.2
    CVE-2026-40139

    Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized acces…

    BeyondTrust Remote Support Privileged Remote Access
  • High 8.7
    CVE-2026-40140

    High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a…

    BeyondTrust Remote Support Privileged Remote Access
  • High 8.5
    CVE-2026-40141

    High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

    A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated att…

    BeyondTrust Remote Support Privilege Remote Access

Revision history

  1. #2

    Referenz(en) aufgenommen: GHSA-HCRC-2PW3-4V88

  2. #1

    Initiale Fassung

References