privileged remote access vulnerabilities and fixes

Recent CVEs affecting privileged remote access, with upgrade or downgrade steps. 4 tracked.

Also searched as: privilegedremoteaccess.

privileged remote access has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-07-06. Highest priority: CVE-2026-40139 (score 53/100).

• CVE-2026-40141 CRITICAL 9.9 UPGRADE UPGRADE A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileg
• CVE-2026-40140 HIGH 7.5 UPGRADE UPGRADE BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerabili
• CVE-2026-40139 CRITICAL 9.8 UPGRADE UPGRADE A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Suppo
• CVE-2026-40138 HIGH 8.1 UPGRADE UPGRADE A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Suppo

FAQ

How do I fix privileged remote access vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is privileged remote access being exploited right now?

None of the tracked privileged remote access CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which privileged remote access CVE should I patch first?

CVE-2026-40139 currently ranks highest (53/100): A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Suppo.

RSS feed for privileged remote access · ← Back to latest CVEs