Skip to content
OpenAdvisories
Critical · 9.2 CVE-2026-40138 EUVD-2026-41886GHSA-hcrc-2pw3-4v88

Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

Published Jul 6, 2026 · Updated Jul 7, 2026 · Assigned by BT

Description

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled

Affected products

VendorProductAffectedFixed
BeyondTrust Remote Support ≤ 25.3.2 —
BeyondTrust Privileged Remote Access ≤ 25.3.2 —

Advisories 2

References