Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-40138

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 33.8%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-40138


Contact Us

Shodan ® - All rights reserved