{"vulnerability": "cve-2026-40139", "sightings": [{"uuid": "48882a7c-a5cf-492d-93d0-a43628eaa7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpymetigjj26", "content": "CVE-2026-40139 - Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access\nCVE ID : CVE-2026-40139\n \n Published : July 6, 2026, 4:13 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : A critical pre-authentication vulnerability exists in th...", "creation_timestamp": "2026-07-06T17:27:11.212327Z"}, {"uuid": "96b079d1-7f37-44f2-aac0-a33078f9650a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpymjzwroy2i", "content": "CVE-2026-40139\nAn attacker can bypass security checks and gain access to BeyondTrust Remote Support, including accounts with high-level permissions, if a specific configuration is set up. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-06T17:30:05.629968Z"}, {"uuid": "86ce58f4-2ea6-4b77-851c-1ae16c0d457c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpynkx35vt2f", "content": "BeyondTrust patched a critical pre-authentication vulnerability (CVE-2026-40138, CVE-2026-40139, CVE-2026-40140). Update Remote Support instances now.\n\n#BeyondTrust #Vulnerability #CVE202640138 #CyberSecurity #RemoteSupport", "creation_timestamp": "2026-07-06T17:48:42.488219Z"}, {"uuid": "a96183ff-0e6e-4d08-9fb1-0a9482a86435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40139", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq2lxpdkie2j", "content": "\ud83d\udcf0 BeyondTrust Rilis Patch untuk Dua Celah Kritis yang Memungkinkan Bypass Autentikasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/beyondtrust-authentication-bypass-vulnerability-patch/\n\n#beyondtrust #cve-2026-40138 #cve-2026-40139 #cve-2026-40140 #cve-2026-40141 #cybersec", "creation_timestamp": "2026-07-07T12:25:10.986934Z"}, {"uuid": "993a059b-414f-47cb-9b3d-f3122122223c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40139", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mq2n4r5f2d2d", "content": "\ud83d\udcf0 BeyondTrust Rilis Patch untuk Dua Celah Kritis yang Memungkinkan Bypass Autentikasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/beyondtrust-authentication-bypass-vulnerability-patch/\n\n#beyondtrust #cve-2026-40138 #cve-2026-40139 #cve-2026-40140 #cve-2026-40141 #potatosec", "creation_timestamp": "2026-07-07T12:45:53.421521Z"}, {"uuid": "a4d3267b-de88-4227-aace-fbfef9e05434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq4hcmam3s2f", "content": "\ud83d\udccc CVE-2026-40139 - A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support.\u00a0Improper processing of authenticatio... https://www.cyberhub.blog/cves/CVE-2026-40139", "creation_timestamp": "2026-07-08T06:07:08.480879Z"}, {"uuid": "46bb67d8-0eef-4e52-a39b-e4d85c12564e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116884921728737765", "content": "\ud83d\udcf0 BeyondTrust Patches Critical Flaws in Remote Support and Privileged Access Tools\n\ud83d\udea8 URGENT: BeyondTrust patches two CRITICAL auth bypass flaws (CVE-2026-40138, CVE-2026-40139) in its Remote Support & Privileged Remote Access tools. Unauthenticated remote access is possible. Patch NOW. #Vulnerability #PAM #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/beyondtrust-patches-critical-authentication-bypass-flaws-in-remote-access-tools/?utm\u2026", "creation_timestamp": "2026-07-08T14:52:49.321047Z"}, {"uuid": "ba7c1b38-1c67-4a60-81cc-5fdc29771001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mq5ept3hka2f", "content": "\ud83d\udea8 URGENT: BeyondTrust patches two CRITICAL auth bypass flaws (CVE-2026-40138, CVE-2026-40139) in its Remote Support & Privileged Remote Access tools. Unauthenticated remote access is possible. Patch NOW. #Vulnerability #PAM #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-08T14:53:28.862202Z"}, {"uuid": "5b913b38-8c06-4b21-9d18-9b1effa9f368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mq5t7popij2g", "content": "Self-hosted BeyondTrust appliances are exposed until admins patch: two CVSS 9.2 pre-auth flaws, CVE-2026-40138 and CVE-2026-40139, let unauthenticated attackers reach privileged accounts in Remote Support and Privileged Remote Access. Cloud was patched in April. Per The Hacker News.", "creation_timestamp": "2026-07-08T19:12:54.766649Z"}, {"uuid": "17e075ba-9676-4091-be29-5b6263ca641a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstfmwwyg226", "content": "BeyondTrust\u306e\u30ea\u30e2\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u88fd\u54c1\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\nBeyondTrust\u306e\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u30c4\u30fc\u30eb\u300cRemote Support\uff08RS\uff09\u300d\u300cPrivileged Remote Access\uff08PRA\uff09\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n...\n\n\u8a8d\u8a3c\u30b5\u30d6\u30b7\u30b9\u30c6\u30e0\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u30c7\u30fc\u30bf\u306e\u691c\u8a3c\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u3092\u56de\u907f\u3057\u3066\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u3078\u7279\u6a29\u30a2\u30ab\u30a6\u30f3\u30c8\u306a\u3069\u3068\u3057\u3066\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u3068\u306a\u308b\u300cCVE-2026-40138\u300d\u304c\u5224\u660e\u3057\u305f\u3002\n\n\u300cCVE-2026-40139\u300d\u306f\u300cRS\u300d\u306e\u307f\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3055\u308c\u308b\u304c\u3001\u8a8d\u8a3c\u30b5\u30d6\u30b7\u30b9\u30c6\u30e0\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u8981\u6c42\u306e\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u7279\u6a29\u30a2...", "creation_timestamp": "2026-08-11T19:58:42.707834Z"}, {"uuid": "b5de39b2-b724-4f24-8682-65303185dfb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-beyondtrust-3", "content": "", "creation_timestamp": "2026-07-14T08:45:06.073856Z"}]}