Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)
Priority LOW 33CWE-125Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0013 2nd percentileScored 2026-11-07
Fix Fixed Endpoint Privilege Management (Windows deployments) (BeyondTrust): 26.1.2
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| BeyondTrust | Endpoint Privilege Management (Windows deployments) | before 26.1.2 | 26.1.2 | Patch available | CNA |
- Endpoint Privilege Management (Windows deployments) VendorBeyondTrust Affected before 26.1.2 Fixed in 26.1.2 Patch available CNA
Remediation
- Fix · CNA Endpoint Privilege Management (Windows deployments) (BeyondTrust) Fixed in 26.1.2
Timeline
- 2026-10-02 Threatist record created from CVE-2026-40144
- 2026-10-03 Alias added: GHSA-5qm2-5273-p7p4
References
More BeyondTrust vulnerabilities
- TI-2026-01414 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) KEVCVSS 4.0CRITICAL 9.9
- TI-2024-11463 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) KEVCVSS 3.1CRITICAL 9.8
- TI-2026-74999 Weak origin checks in BeyondTrust Remote Support allow file actions KEVCVSS 4.0CRITICAL 9.3
- TI-2021-02242 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer… KEVCVSS 3.1HIGH 7.8
- TI-2024-11765 Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) KEVCVSS 3.1HIGH 7.2
- TI-2023-09461 BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a… CVSS 3.1HIGH 7.8
Sources
- CVE-2026-40144 · CVE Program
- CVE-2026-40144 · NVD
- FIRST EPSS
- GHSA-5qm2-5273-p7p4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences