CVE-2026-40140 is a CWE-400 uncontrolled resource consumption vulnerability in BeyondTrust Remote Support and Privileged Remote Access products. The flaw exists in the network communication subsystem where client input is not sufficiently validated. This allows an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition, impacting the availability of the affected appliance. The vulnerability is rated high severity with a CVSS 4.0 base score of 8.7, indicating network attack vector, no privileges or user interaction required, and high impact on availability. No vendor advisory or patch information is currently available, and no known exploits have been reported in the wild.

An unauthenticated remote attacker can exploit this vulnerability to cause a denial-of-service condition, resulting in loss of availability of the BeyondTrust appliance. This could disrupt remote support and privileged remote access services relying on the affected product. There is no indication of confidentiality or integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor vendor communications for updates. No official remediation or temporary fixes have been published at this time.