BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

BeyondTrust released patches addressing four critical pre-authentication vulnerabilities in Remote Support and Privileged Remote Access (CVEs 2026-40138/40139/40140/40141) that can enable unauthenticated access bypass, privilege escalation, or denial-of-service under certain configurations; fixes are available in RS/PRA 25.3.3 and later and no active exploitation has been reported, though related past flaws have been exploited in the wild.