CVE Tools
Track your stack

BeyondTrust warns of critical flaws in remote access software

BleepingComputerBy Sergiu Gatlan

PatchRemote Support (RS)Privileged Remote Access (PRA)

Our summary

BeyondTrust has disclosed critical issues in its Remote Support (RS) and Privileged Remote Access (PRA) products that could let attackers bypass authentication and reach protected appliances. The company cites CVE-2026-40138 (RS and PRA versions 25.3.2 or earlier) and CVE-2026-40139, where improper handling of RS authentication requests could allow unauthenticated remote attackers to gain unauthorized access.

BeyondTrust also released fixes for CVE-2026-40140 and CVE-2026-40141 affecting unpatched RS and PRA instances, which can lead to denial-of-service or unintended access to restricted resources, making patching urgent.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsBeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRACVE-2024-12356, CVE-2026-1731 +4
  2. The Hacker News⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and MoreCVE-2026-40138, CVE-2026-40139 +2
  3. Kaspersky SecurelistExploits and vulnerabilities in Q2 2026CVE-2024-12356, CVE-2026-1731
  4. The Hacker NewsFBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. OrganizationsCVE-2026-1731

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store