[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8nzcBE4zgG2poQDyZuq-KnoVNX00ITq2gDF-Pzf24Xc":3},{"article":4,"iocs":46,"watch_terms":67,"solutions":68,"lesson":159},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"09b9c31a-8233-4493-8d53-edcf06de7705","BeyondTrust warns of critical flaws in remote access software","beyondtrust-warns-of-critical-flaws-in-remote-access-software-3ed82d","BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authentication. [...]","BeyondTrust has issued a warning about two critical vulnerabilities in its Remote Support (RS) and Privileged Remote Access (PRA) software. These flaws, CVE-2026-40138 and CVE-2026-40139, could allow unauthenticated attackers to bypass authentication and gain unauthorized access under specific configurations. The company has released patches and urges customers to update their systems, noting that similar past vulnerabilities have been exploited by threat actors, including the nation-state group Silk Typhoon.","BeyondTrust warns of critical flaws in Remote Support and Privileged Remote Access software.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fbeyondtrust-warns-of-critical-flaws-in-remote-access-software\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F02\u002F16\u002FBeyondTrust.jpg","2026-07-07T08:12:10+00:00","2026-07-07T10:00:29.06322+00:00",9,[17,20,23,25],{"name":18,"type":19},"BeyondTrust","vendor",{"name":21,"type":22},"Remote Support","product",{"name":24,"type":22},"Privileged Remote Access",{"name":26,"type":27},"Silk Typhoon","threat_actor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,39,41],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47,51,54,57,59,62,65],{"type":48,"value":49,"context":50},"cve","CVE-2026-40138","Critical vulnerability in BeyondTrust RS and PRA software allowing authentication bypass.",{"type":48,"value":52,"context":53},"CVE-2026-40139","Critical vulnerability in BeyondTrust RS software allowing unauthenticated remote access.",{"type":48,"value":55,"context":56},"CVE-2026-40140","High-severity vulnerability in BeyondTrust RS and PRA software leading to denial-of-service or restricted resource access.",{"type":48,"value":58,"context":56},"CVE-2026-40141",{"type":48,"value":60,"context":61},"CVE-2026-1731","Previously exploited critical pre-authentication RCE vulnerability in BeyondTrust RS and PRA.",{"type":48,"value":63,"context":64},"CVE-2024-12356","Zero-day vulnerability exploited by Silk Typhoon to breach BeyondTrust systems.",{"type":48,"value":66,"context":64},"CVE-2024-12686",[18,21,24],{"controls":69,"vendors":153},[70,99,128],{"slug":71,"name":72,"problem":73,"products":74},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",[75,83,91],{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.",{"slug":100,"name":101,"problem":102,"products":103},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[104,112,120],{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":129,"name":130,"problem":131,"products":132},"patch-management","Automated patch management","Known holes get closed in days, not months.",[133,141,145],{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":129,"product_name":142,"url":143,"description":144},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",[154],{"slug":155,"name":18,"logo_path":156,"roles":157},"beyondtrust","\u002Fvendor-logos\u002Fbeyondtrust.png",[158],"affected",{"slug":160,"title":161,"body":162,"framework_refs":163,"framework_notes":174},"critical-auth-bypass-flaws-found-in-beyondtrust-remote-access-tools","Critical Auth-Bypass Flaws Found in BeyondTrust Remote Access Tools","Two critical vulnerabilities in BeyondTrust's Remote Support and Privileged Remote Access software allow unauthenticated attackers to bypass authentication entirely under certain configurations, representing a severe risk to enterprise environments. Remote access tools are high-value targets because they often sit at the perimeter of networks with elevated privileges, making unpatched flaws a direct gateway for threat actors. The involvement of nation-state group Silk Typhoon in exploiting similar past BeyondTrust vulnerabilities underscores that these are not theoretical risks — they are actively weaponized. Organizations that delay patching internet-facing privileged access infrastructure face existential exposure, as attackers can leverage these footholds to pivot deep into internal systems.",[164,165,166,167,168,169,170,171,172,173],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 5: Account Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 IA-2: Identification and Authentication","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF RS.MI-3: Newly Identified Vulnerabilities Mitigated","ITIL Change Management: Emergency Change Procedures","CISA KEV Catalog: Known Exploited Vulnerabilities Remediation Guidance",{}]