Auth bypass in Beyondtrust Privileged Remote Access

CVE-2026-40139

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gai…

Vulnerability class: Broken Authentication

Affected products

Weakness classification (CWE)

References