---
title: "BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA — Stuff That Spins"
description: "BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if succ…"
	canonical: "https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra"
html: "https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra"
json: "https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra.json"
markdown: "https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra.md"
keywords: ["narrative intelligence", "SpinGraph", "AI recall"]
date: "2026-07-07T05:16:51+00:00"
modified: "2026-07-07T12:02:30.275063+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://stuffthatspins.com/#organization","name":"Stuff That Spins","url":"https://stuffthatspins.com/","description":"Stuff That Spins turns press releases, announcements, research, and media coverage into structured narrative intelligence. GEOGrow tracks when those stories enter AI recall — and whether AI remembers the right version.","logo":{"@type":"ImageObject","url":"https://stuffthatspins.com/images/logo.png"},"sameAs":[]},{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra#article","headline":"BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA","description":"BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if succ…","datePublished":"2026-07-07T05:16:51+00:00","dateModified":"2026-07-07T12:02:30.275063+00:00","url":"https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"The Hacker News","url":"https://feeds.feedburner.com/TheHackersNews"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html","about":[],"mentions":[{"@type":"Organization","name":"The Hacker News"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA","item":"https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra"}]}]}
---

# BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

**Source:** Unknown  
**Published:** July 7, 2026  
**Original:** https://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html  

## On this page

- [Overview](#overview)

<a id="overview"></a>

## Overview

BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices. The vulnerabilities are listed below - CVE-2026-40138 (CVSS score: 9.2) - A pre-authentication vulnerability exists in the

---
*HTML version: https://stuffthatspins.com/spin/beyondtrust-patches-critical-auth-bypass-flaws-in-remote-support-and-pra*
