BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

BeyondTrust has issued updates to fix two critical security vulnerabilities in its Remote Support and Privileged Remote Access products. These flaws could be exploited by unauthenticated attackers to gain control of vulnerable devices. One of the vulnerabilities, identified as CVE-2026-40138, has a CVSS score of 9.2 and is a pre-authentication issue. This vulnerability exists in the Remote Support product, allowing potential unauthorized access. The updates address these critical authentication bypass flaws.