{"vulnerability": "cve-2026-4013", "sightings": [{"uuid": "63dc7fe8-b765-4509-9804-c832ce07c863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4013", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgu2qwbuni2d", "content": "", "creation_timestamp": "2026-03-12T09:14:26.190094Z"}, {"uuid": "3d4caadc-0054-46c3-a4e0-6414ca7f81d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4013", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4013", "content": "", "creation_timestamp": "2026-03-12T07:16:11.000000Z"}, {"uuid": "74f5355f-3880-4b5b-9833-bda83a64adb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlmyt54c6l2p", "content": "CVE-2026-40136 - Denial of service (DoS) in SAP Financial Consolidation\nCVE ID : CVE-2026-40136\n \n Published : May 12, 2026, 3:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminatin...", "creation_timestamp": "2026-05-12T04:57:12.860366Z"}, {"uuid": "0ed318cb-3294-4e4c-9afa-9f416f2b86b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlmzbuz2h72q", "content": "CVE-2026-40132 - Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard)\nCVE ID : CVE-2026-40132\n \n Published : May 12, 2026, 3:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : Due to missing authorization check in SAP St...", "creation_timestamp": "2026-05-12T05:05:27.282918Z"}, {"uuid": "5e6e4587-cdd9-4931-8e88-0dc36ab5e1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40133", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlmzol4bqz2i", "content": "CVE-2026-40133 - Missing Authorization check in SAP S/4HANA Condition Maintenance\nCVE ID : CVE-2026-40133\n \n Published : May 12, 2026, 3:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated ...", "creation_timestamp": "2026-05-12T05:12:33.223993Z"}, {"uuid": "61a9e7d9-7c1e-4b80-9f8d-dad1b67b38c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mln277cgve2p", "content": "CVE-2026-40131 - SQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy library\nCVE ID : CVE-2026-40131\n \n Published : May 12, 2026, 3:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : SQL injection vulnerability exists in @sap/hdi-deploy package, where...", "creation_timestamp": "2026-05-12T05:22:12.355676Z"}, {"uuid": "94a83768-af51-4242-b263-3c34e491b900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mln2i5sblj2i", "content": "CVE-2026-40137 - Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)\nCVE ID : CVE-2026-40137\n \n Published : May 12, 2026, 3:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : SAP TAF_APPLAUNCHER within Business Server Pages allows an ...", "creation_timestamp": "2026-05-12T05:26:51.614791Z"}, {"uuid": "47ffd370-e5c9-497d-81da-e7f1143cf80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40135", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mln2r4b5qy2h", "content": "CVE-2026-40135 - OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform\nCVE ID : CVE-2026-40135\n \n Published : May 12, 2026, 3:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : An OS Command Injection vulnerability exists in the SAP N...", "creation_timestamp": "2026-05-12T05:31:52.146070Z"}, {"uuid": "81fdaf57-6c72-4c58-9f62-9aba80e893f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mln322rao22h", "content": "CVE-2026-40134 - Missing Authorization Check in SAP Incentive and Commission Management\nCVE ID : CVE-2026-40134\n \n Published : May 12, 2026, 3:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : Due to insufficient authorization checks in the SAP Incentive and Commission Managem...", "creation_timestamp": "2026-05-12T05:36:56.570945Z"}, {"uuid": "0c8b546f-47d0-4e92-b6a4-a49aed11ffff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40131", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:20:28.727987Z"}, {"uuid": "2bb8f53e-ab49-42fb-aaef-1719fdb90d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40132", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:20:28.881004Z"}, {"uuid": "8ae9996a-e628-4db4-b375-e51ba9773260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40133", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:20:29.026568Z"}, {"uuid": "46f10c68-3451-4724-a0a6-94e969271edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40134", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:20:29.169106Z"}, {"uuid": "d461122e-fb86-4b2d-b865-f9ebde47696a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40135", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:20:29.306249Z"}, {"uuid": "d9dc7cce-b235-41a8-8802-638c9c3dccb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40136", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:20:29.515451Z"}, {"uuid": "bba7d91e-0548-4678-a41e-d1f44cef8d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40137", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:20:29.657546Z"}, {"uuid": "f857725a-f408-445b-aad3-dcea0e5f0fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40131", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:25:06.730197Z"}, {"uuid": "3ec0675d-513b-437b-a6ee-c9f8946e00bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40132", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:25:06.901105Z"}, {"uuid": "20aac81b-066f-4301-898e-7e1c213af282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40133", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:25:07.208183Z"}, {"uuid": "daeb05a9-6a6c-4bd7-9830-f11ef1c145e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40134", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:25:07.384594Z"}, {"uuid": "6c5d67e5-5d58-4936-b374-18b70fdc6b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40135", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:25:07.549287Z"}, {"uuid": "412ed6e8-f4cc-462a-84f3-b6d74ebd05c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40136", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:25:07.728383Z"}, {"uuid": "ebc7b0c0-dc3a-4f60-ba04-6fe2e3395027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40137", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:25:07.904440Z"}, {"uuid": "48882a7c-a5cf-492d-93d0-a43628eaa7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpymetigjj26", "content": "CVE-2026-40139 - Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access\nCVE ID : CVE-2026-40139\n \n Published : July 6, 2026, 4:13 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : A critical pre-authentication vulnerability exists in th...", "creation_timestamp": "2026-07-06T17:27:11.212327Z"}, {"uuid": "516f6042-18ad-4b5d-bba2-a5ae56b8506b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpymjyjtts2y", "content": "CVE-2026-40138\nA security flaw in BeyondTrust Remote Support and Privileged Remote Access allows an attacker to bypass access controls and gain unauthorized access to accounts with elevated privileges. This can happen if an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-06T17:30:04.394768Z"}, {"uuid": "96b079d1-7f37-44f2-aac0-a33078f9650a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpymjzwroy2i", "content": "CVE-2026-40139\nAn attacker can bypass security checks and gain access to BeyondTrust Remote Support, including accounts with high-level permissions, if a specific configuration is set up. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-06T17:30:05.629968Z"}, {"uuid": "100c601f-86d6-43d5-8933-220d2b163900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyn7p5zhe2z", "content": "CVE-2026-40138 - Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access\nCVE ID : CVE-2026-40138\n \n Published : July 6, 2026, 4:12 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : A critical pre-authentication vulnerability exists in th...", "creation_timestamp": "2026-07-06T17:42:12.640539Z"}, {"uuid": "5a480092-b257-46c5-8f1e-1177d8e0301f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpynkx35vt2f", "content": "BeyondTrust patched a critical pre-authentication vulnerability (CVE-2026-40138, CVE-2026-40139, CVE-2026-40140). Update Remote Support instances now.\n\n#BeyondTrust #Vulnerability #CVE202640138 #CyberSecurity #RemoteSupport", "creation_timestamp": "2026-07-06T17:48:42.453509Z"}, {"uuid": "86ce58f4-2ea6-4b77-851c-1ae16c0d457c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpynkx35vt2f", "content": "BeyondTrust patched a critical pre-authentication vulnerability (CVE-2026-40138, CVE-2026-40139, CVE-2026-40140). Update Remote Support instances now.\n\n#BeyondTrust #Vulnerability #CVE202640138 #CyberSecurity #RemoteSupport", "creation_timestamp": "2026-07-06T17:48:42.488219Z"}, {"uuid": "f3d34633-263f-4860-ac7a-8e7a77ba0081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40138", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116874512026637035", "content": "\u203c\ufe0f New Dark Web Informer Blog Post!\nTitle: Pre-Auth Access-Control Bypass in BeyondTrust Remote Support and PRA (CVE-2026-40138)\nLink: https://darkwebinformer.com/pre-auth-access-control-bypass-in-beyondtrust-remote-support-and-pra-cve-2026-40138/", "creation_timestamp": "2026-07-06T18:45:26.331307Z"}, {"uuid": "e6b2e510-6ea6-49ab-8e68-d77437f32b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html", "content": "BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-40138 (CVSS score: 9.2) - A pre-authentication vulnerability exists in the", "creation_timestamp": "2026-07-07T07:00:49.253832Z"}, {"uuid": "20cb5cba-131c-4bdc-b079-b85c5a54b81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mq23qte7tx2b", "content": "BeyondTrust disclosed four pre-authentication vulnerabilities in its Remote Support (RS) and Privileged Remote Access (PRA) products. Two critical flaws (CVE-2026-40138 [\u2026]", "creation_timestamp": "2026-07-07T07:34:59.997487Z"}, {"uuid": "01d34097-d345-4737-91d3-d62762357779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40138", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq2lxpdkie2j", "content": "\ud83d\udcf0 BeyondTrust Rilis Patch untuk Dua Celah Kritis yang Memungkinkan Bypass Autentikasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/beyondtrust-authentication-bypass-vulnerability-patch/\n\n#beyondtrust #cve-2026-40138 #cve-2026-40139 #cve-2026-40140 #cve-2026-40141 #cybersec", "creation_timestamp": "2026-07-07T12:25:10.933688Z"}, {"uuid": "a96183ff-0e6e-4d08-9fb1-0a9482a86435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40139", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq2lxpdkie2j", "content": "\ud83d\udcf0 BeyondTrust Rilis Patch untuk Dua Celah Kritis yang Memungkinkan Bypass Autentikasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/beyondtrust-authentication-bypass-vulnerability-patch/\n\n#beyondtrust #cve-2026-40138 #cve-2026-40139 #cve-2026-40140 #cve-2026-40141 #cybersec", "creation_timestamp": "2026-07-07T12:25:10.986934Z"}, {"uuid": "9f616ac6-c678-496d-afb7-0288f018672b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40138", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mq2n4r5f2d2d", "content": "\ud83d\udcf0 BeyondTrust Rilis Patch untuk Dua Celah Kritis yang Memungkinkan Bypass Autentikasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/beyondtrust-authentication-bypass-vulnerability-patch/\n\n#beyondtrust #cve-2026-40138 #cve-2026-40139 #cve-2026-40140 #cve-2026-40141 #potatosec", "creation_timestamp": "2026-07-07T12:45:53.382623Z"}, {"uuid": "993a059b-414f-47cb-9b3d-f3122122223c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40139", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mq2n4r5f2d2d", "content": "\ud83d\udcf0 BeyondTrust Rilis Patch untuk Dua Celah Kritis yang Memungkinkan Bypass Autentikasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/beyondtrust-authentication-bypass-vulnerability-patch/\n\n#beyondtrust #cve-2026-40138 #cve-2026-40139 #cve-2026-40140 #cve-2026-40141 #potatosec", "creation_timestamp": "2026-07-07T12:45:53.421521Z"}, {"uuid": "3da78fb2-f72e-4717-ac46-c67cf13a5677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116878810477761772", "content": "Attention, elevated activities detected targeting BeyondTrust Remote Support and Privileged Remote Access (CVE-2026-40138) https://vuldb.com/vuln/376483/cti", "creation_timestamp": "2026-07-07T12:58:35.581642Z"}, {"uuid": "28255013-1353-42a6-ba91-797549e75817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mq2qeyc4pd2u", "content": "\ud83e\udd16 CVE-2026-40138 (CVSS 9.2): Pre-authentication bypass in BeyondTrust Remote Support & PRA. Unauthenticated attackers can take full control of vulnerable enterprise devices. Patch now.\n\nhttps://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html", "creation_timestamp": "2026-07-07T13:44:10.686730Z"}, {"uuid": "91f99877-668f-4ebe-b18e-7c5dfa09820d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html", "content": "BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-40138 (CVSS score: 9.2) - A pre-authentication vulnerability exists in the", "creation_timestamp": "2026-07-08T01:00:53.755431Z"}, {"uuid": "64902bb9-c761-4795-8a3b-a60c66d6c966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq4fmy574g2o", "content": "\ud83d\udccc CVE-2026-40138 - A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Imprope... https://www.cyberhub.blog/cves/CVE-2026-40138", "creation_timestamp": "2026-07-08T05:37:07.483812Z"}, {"uuid": "a4d3267b-de88-4227-aace-fbfef9e05434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq4hcmam3s2f", "content": "\ud83d\udccc CVE-2026-40139 - A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support.\u00a0Improper processing of authenticatio... https://www.cyberhub.blog/cves/CVE-2026-40139", "creation_timestamp": "2026-07-08T06:07:08.480879Z"}, {"uuid": "5b279e8a-de8d-473b-8b3e-7bc837680ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116884921728737765", "content": "\ud83d\udcf0 BeyondTrust Patches Critical Flaws in Remote Support and Privileged Access Tools\n\ud83d\udea8 URGENT: BeyondTrust patches two CRITICAL auth bypass flaws (CVE-2026-40138, CVE-2026-40139) in its Remote Support & Privileged Remote Access tools. Unauthenticated remote access is possible. Patch NOW. #Vulnerability #PAM #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/beyondtrust-patches-critical-authentication-bypass-flaws-in-remote-access-tools/?utm\u2026", "creation_timestamp": "2026-07-08T14:52:49.266968Z"}, {"uuid": "46bb67d8-0eef-4e52-a39b-e4d85c12564e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116884921728737765", "content": "\ud83d\udcf0 BeyondTrust Patches Critical Flaws in Remote Support and Privileged Access Tools\n\ud83d\udea8 URGENT: BeyondTrust patches two CRITICAL auth bypass flaws (CVE-2026-40138, CVE-2026-40139) in its Remote Support & Privileged Remote Access tools. Unauthenticated remote access is possible. Patch NOW. #Vulnerability #PAM #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/beyondtrust-patches-critical-authentication-bypass-flaws-in-remote-access-tools/?utm\u2026", "creation_timestamp": "2026-07-08T14:52:49.321047Z"}, {"uuid": "c5e3edb9-093f-4edd-9ab6-020ea30d0402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mq5ept3hka2f", "content": "\ud83d\udea8 URGENT: BeyondTrust patches two CRITICAL auth bypass flaws (CVE-2026-40138, CVE-2026-40139) in its Remote Support & Privileged Remote Access tools. Unauthenticated remote access is possible. Patch NOW. #Vulnerability #PAM #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-08T14:53:28.811732Z"}, {"uuid": "ba7c1b38-1c67-4a60-81cc-5fdc29771001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mq5ept3hka2f", "content": "\ud83d\udea8 URGENT: BeyondTrust patches two CRITICAL auth bypass flaws (CVE-2026-40138, CVE-2026-40139) in its Remote Support & Privileged Remote Access tools. Unauthenticated remote access is possible. Patch NOW. #Vulnerability #PAM #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-08T14:53:28.862202Z"}, {"uuid": "e9154790-9bc4-40e5-b9b8-34815ef37678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mq5gzfgrhn2w", "content": "\u26a0\ufe0f PATCH NOW\n\nBeyondTrust patched two pre-auth bypasses (CVSS 9.2) in its Remote Support and Privileged Remote Access appliances.\n\nNo exploit yet, but its products were reportedly abused in the 2024 US Treasury breach.\n\nFix: upgrade to 25.3.3. (CVE-2026-40138/40139)", "creation_timestamp": "2026-07-08T15:34:38.886857Z"}, {"uuid": "f8e5e648-c950-487d-90d6-be1a7a6e7f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mq5t7popij2g", "content": "Self-hosted BeyondTrust appliances are exposed until admins patch: two CVSS 9.2 pre-auth flaws, CVE-2026-40138 and CVE-2026-40139, let unauthenticated attackers reach privileged accounts in Remote Support and Privileged Remote Access. Cloud was patched in April. Per The Hacker News.", "creation_timestamp": "2026-07-08T19:12:54.723329Z"}, {"uuid": "5b913b38-8c06-4b21-9d18-9b1effa9f368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mq5t7popij2g", "content": "Self-hosted BeyondTrust appliances are exposed until admins patch: two CVSS 9.2 pre-auth flaws, CVE-2026-40138 and CVE-2026-40139, let unauthenticated attackers reach privileged accounts in Remote Support and Privileged Remote Access. Cloud was patched in April. Per The Hacker News.", "creation_timestamp": "2026-07-08T19:12:54.766649Z"}, {"uuid": "5f2e9ab0-9330-4cc0-a0cf-ae06ca629f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstfmwwyg226", "content": "BeyondTrust\u306e\u30ea\u30e2\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u88fd\u54c1\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\nBeyondTrust\u306e\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u30c4\u30fc\u30eb\u300cRemote Support\uff08RS\uff09\u300d\u300cPrivileged Remote Access\uff08PRA\uff09\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n...\n\n\u8a8d\u8a3c\u30b5\u30d6\u30b7\u30b9\u30c6\u30e0\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u30c7\u30fc\u30bf\u306e\u691c\u8a3c\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u3092\u56de\u907f\u3057\u3066\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u3078\u7279\u6a29\u30a2\u30ab\u30a6\u30f3\u30c8\u306a\u3069\u3068\u3057\u3066\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u3068\u306a\u308b\u300cCVE-2026-40138\u300d\u304c\u5224\u660e\u3057\u305f\u3002\n\n\u300cCVE-2026-40139\u300d\u306f\u300cRS\u300d\u306e\u307f\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3055\u308c\u308b\u304c\u3001\u8a8d\u8a3c\u30b5\u30d6\u30b7\u30b9\u30c6\u30e0\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u8981\u6c42\u306e\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u7279\u6a29\u30a2...", "creation_timestamp": "2026-08-11T19:58:42.657805Z"}, {"uuid": "17e075ba-9676-4091-be29-5b6263ca641a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstfmwwyg226", "content": "BeyondTrust\u306e\u30ea\u30e2\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u88fd\u54c1\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\nBeyondTrust\u306e\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u30c4\u30fc\u30eb\u300cRemote Support\uff08RS\uff09\u300d\u300cPrivileged Remote Access\uff08PRA\uff09\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n...\n\n\u8a8d\u8a3c\u30b5\u30d6\u30b7\u30b9\u30c6\u30e0\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u30c7\u30fc\u30bf\u306e\u691c\u8a3c\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u3092\u56de\u907f\u3057\u3066\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u3078\u7279\u6a29\u30a2\u30ab\u30a6\u30f3\u30c8\u306a\u3069\u3068\u3057\u3066\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u3068\u306a\u308b\u300cCVE-2026-40138\u300d\u304c\u5224\u660e\u3057\u305f\u3002\n\n\u300cCVE-2026-40139\u300d\u306f\u300cRS\u300d\u306e\u307f\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3055\u308c\u308b\u304c\u3001\u8a8d\u8a3c\u30b5\u30d6\u30b7\u30b9\u30c6\u30e0\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u8981\u6c42\u306e\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u7279\u6a29\u30a2...", "creation_timestamp": "2026-08-11T19:58:42.707834Z"}, {"uuid": "65e6186f-c07b-4db8-a6fc-cd161c25dc50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mqgafetowu26", "content": "BeyondTrust patches critical flaws in RS and PRA products (CVE-2026-40138, CVSS 9.2). Exploits might let attackers take control. Update now to secure your devices.", "creation_timestamp": "2026-07-12T03:30:00.782320Z"}, {"uuid": "a177e07a-cbcd-42c9-95fd-809e106d5f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mqhxq7x6ea2p", "content": "BeyondTrust Remote Support and PRA patched critical auth bypass flaws (CVE-2026-40138, CVSS 9.2). Apply updates now and verify affected hosts are upgraded. #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html", "creation_timestamp": "2026-07-12T20:00:21.091420Z"}, {"uuid": "ea7992c2-3152-406b-ae9a-c1d94e8296a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-beyondtrust-3", "content": "", "creation_timestamp": "2026-07-14T08:45:03.749197Z"}, {"uuid": "b5de39b2-b724-4f24-8682-65303185dfb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40139", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-beyondtrust-3", "content": "", "creation_timestamp": "2026-07-14T08:45:06.073856Z"}, {"uuid": "64c2fdd5-bc4b-4ffe-b9b5-4b0c0a613bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "Telegram/DBeqhlnhnOPQF0wJyEblo98ytsQjas9o8m7A-tLEjUxkUw", "content": "", "creation_timestamp": "2026-07-18T13:00:04.173616Z"}, {"uuid": "c3470896-3376-498d-8ed2-bfb1b964175b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "Telegram/DBeqhlnhnOPQF0wJyEblo98ytsQjas9o8m7A-tLEjUxkUw", "content": "", "creation_timestamp": "2026-07-19T00:00:27.823489Z"}, {"uuid": "c938fb04-edec-435c-a33a-18581f62cb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40138", "type": "seen", "source": "https://gist.github.com/cyberupdates365/bf7660f4ca560d30158b5e5aa5986267", "content": "# 2026 Active CVE and Patch Index\n\nMaster Quick-Reference Index of official mitigation steps and investigative threat reports by **[CyberUpdates365.com](https://cyberupdates365.com/)**.\n\n* **[Adobe Coldfusion Cve 2026 48282 Exploited Guide (2026)](https://cyberupdates365.com/adobe-coldfusion-cve-2026-48282-exploited/)**\n* **[Adobe Vulnerability United States Cisa Emergency Alert October 2025 Guide (2026)](https://cyberupdates365.com/adobe-vulnerability-united-states-cisa-emergency-alert-october-2025/)**\n* **[Beyondtrust Cve 2026 40138 40139 Auth Bypass Guide (2026)](https://cyberupdates365.com/beyondtrust-cve-2026-40138-40139-auth-bypass/)**\n* **[Bind9 Resolver Cache Poisoning Vulnerability Guide (2026)](https://cyberupdates365.com/bind9-resolver-cache-poisoning-vulnerability/)**\n* **[Bind 9 Vulnerability Poc Exploit Released Guide (2026)](https://cyberupdates365.com/bind-9-vulnerability-poc-exploit-released/)**\n* **[Chinese Hackers Cisco Zero Day Cisa Emergency Directive 2025 Guide (2026)](https://cyberupdates365.com/chinese-hackers-cisco-zero-day-cisa-emergency-directive-2025/)**\n* **[Cisco Asa Zero Day Rce Vulnerability Actively Exploited Guide (2026)](https://cyberupdates365.com/cisco-asa-zero-day-rce-vulnerability-actively-exploited/)**\n* **[Cve 2025 22225 Vmware Esxi Sandbox Escape Guide (2026)](https://cyberupdates365.com/cve-2025-22225-vmware-esxi-sandbox-escape/)**\n* **[Cve 2026 20896 Gitea Docker Auth Bypass Fix Guide (2026)](https://cyberupdates365.com/cve-2026-20896-gitea-docker-auth-bypass-fix/)**\n* **[Cve 2026 35273 Oracle Peoplesoft Shinyhunters Attack Guide (2026)](https://cyberupdates365.com/cve-2026-35273-oracle-peoplesoft-shinyhunters-attack/)**\n* **[Cve Vulnerabilities 2026 Enterprise Security Hub Guide (2026)](https://cyberupdates365.com/cve-vulnerabilities-2026-enterprise-security-hub/)**\n* **[Google Chrome Zero Day Emergency Update 2026 Guide (2026)](https://cyberupdates365.com/google-chrome-zero-day-emergency-update-2026/)**\n* **[Legacyhive Windows Zero Day Profsvc Fix Guide (2026)](https://cyberupdates365.com/legacyhive-windows-zero-day-profsvc-fix/)**\n* **[Roundcube Cve 2024 42009 Chinese Hackers Exploit Guide (2026)](https://cyberupdates365.com/roundcube-cve-2024-42009-chinese-hackers-exploit/)**\n* **[Samsung Galaxy S25 Zero Day Vulnerability Guide (2026)](https://cyberupdates365.com/samsung-galaxy-s25-zero-day-vulnerability/)**\n* **[Sharepoint Cve 2026 45659 Rce Vulnerability Guide (2026)](https://cyberupdates365.com/sharepoint-cve-2026-45659-rce-vulnerability/)**\n* **[Simplehelp Cve 2026 48558 Rmm Vulnerability Guide (2026)](https://cyberupdates365.com/simplehelp-cve-2026-48558-rmm-vulnerability/)**\n* **[Splunk Enterprise Critical Vulnerability Cve 2026 20253 Guide (2026)](https://cyberupdates365.com/splunk-enterprise-critical-vulnerability-cve-2026-20253/)**\n* **[Windows 11 Recall Vulnerability Totalrecall Reloaded Guide (2026)](https://cyberupdates365.com/windows-11-recall-vulnerability-totalrecall-reloaded/)**\n* **[Wordpress Arbitrary Installation Vulnerabilities Exploited Guide (2026)](https://cyberupdates365.com/wordpress-arbitrary-installation-vulnerabilities-exploited/)**\n* **[Wp2shell Wordpress Vulnerability Fix Guide Guide (2026)](https://cyberupdates365.com/wp2shell-wordpress-vulnerability-fix-guide/)**\n* **[Wsus Rce Vulnerability United States Cve 2025 59287 Critical Security Alert Guide (2026)](https://cyberupdates365.com/wsus-rce-vulnerability-united-states-cve-2025-59287-critical-security-alert/)**\n", "creation_timestamp": "2026-07-25T08:57:56.634008Z"}, {"uuid": "945dc977-9c02-4cfb-a6f9-2ae909304ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40138", "type": "seen", "source": "https://gist.github.com/cyberupdates365/98bc6f7b52471869412a598922c5727b", "content": "# Check Point Zero-Day (CVE-2026-16232): Exploit Code Now Public, Patch Immediately\n*Official breaking security intel and vulnerability remediation guide released by the [CyberUpdates365 Threat Intelligence Desk](https://cyberupdates365.com/).*\n\nA critical authentication bypass in Check Point's SmartConsole management interface was actively exploited as a zero-day before a patch was even available \u00e2\u20ac\u201d and now a working proof-of-concept exploit is public, raising the urgency for anyone still running an unpatched system. Tracked as **CVE-2026-16232**, the flaw lets an unauthenticated attacker gain full administrator access to Security Management Server and Multi-Domain Security Management Server (MDS) deployments.\n\nCheck Point published an official security advisory confirming active exploitation, while researchers at Rapid7 independently confirmed real-world attacks and released a public PoC to help defenders check their own exposure.\n\nTo view our complete technical forensics, IOC audit log discovery rules, and architectural mitigation blueprints, visit our canonical threat report: [Check Point Zero-Day CVE-2026-16232 Complete Advisory](https://cyberupdates365.com/cve-2026-16232-check-point-zero-day-exploit/).\n\n---\n\n## 1. How the SmartConsole Authentication Bypass Works\n\nThe root cause is a broken trust boundary in how the management server authenticates applications. A vulnerable server accepts an attacker-supplied Secure Internal Communication (SIC) identity at face value, instead of verifying it against the authenticated certificate actually presented by the connecting client.\n\nIn practice, an attacker with network reach to the Management Server can learn the server's own SIC identity during normal unauthenticated bootstrap traffic, replay that identity in a forged certificate exchange, and receive a valid application token. That token is then used to request a SmartConsole single sign-on ticket through the legacy management service, which gets redeemed over the newer CPM SOAP API \u00e2\u20ac\u201d resulting in a full, privileged SmartConsole administrator session, with no valid credentials ever required.\n\n* **Related Tactical Threat Intelligence:** This mechanical exploitation methodology closely mirrors recent systemic network edge appliance compromises. To comprehend how sophisticated threat actors execute simultaneous remote code execution and authentication bypass attacks across corporate defensive infrastructures, examine our historical analysis of the [Cisco ASA Zero-Day RCE Exploitation Campaign](https://cyberupdates365.com/cisco-asa-zero-day-rce-vulnerability-actively-exploited/) and our detailed technical teardown of the [BeyondTrust CVE-2026-40138/40139 Authentication Bypass Flaw](https://cyberupdates365.com/beyondtrust-cve-2026-40138-40139-auth-bypass/).\n\n---\n\n## 2. What an Attacker Gains & IOC Hunting Protocols\n\nOnce an attacker redeems the forged SSO ticket, they hold session credentials that support privileged SmartConsole operations, including reading server configuration details and enumerating administrator accounts \u00e2\u20ac\u201d a foothold that could be used to alter firewall policy across an organization's entire protected network.\n\nDefenders have one useful indicator of compromise to hunt for: audit logs showing an authentication method of **\"application token\"** for SmartConsole sessions is a strong sign this exploit path was used, since legitimate administrator logins wouldn't normally show this pattern.\n\n---\n\n## 3. Immediate Remediation & Zero-Trust Hardening\n\n1. **Apply Check Point's Jumbo Hotfix updates immediately:** The vendor fix ensures remote application authentication is checked against the certificate-bound peer identity rather than an untrusted, caller-supplied name.\n2. **Restrict management-plane network access:** Limit which networks and clients can reach the Security Management Server and MDS at all. To eliminate flat internal network vulnerability exposure, align edge hardware management with strict [NIST SP 800-207 Zero Trust Architecture Frameworks](https://cyberupdates365.com/zero-trust-architecture-definitive-guide-2026/).\n3. **Tighten your Trusted Clients configuration:** Don't rely on default settings \u00e2\u20ac\u201d explicitly restrict which systems are permitted to act as SmartConsole GUI clients.\n4. **Audit logs for application token authentication events:** Review SmartConsole audit logs for this specific authentication method as a potential indicator of prior compromise.\n\nFor comprehensive vulnerability tracking and enterprise threat advisories, explore our foundational master directory: [2026 Master CVE Threat & Enterprise Security Hub](https://cyberupdates365.com/cve-vulnerabilities-2026-enterprise-security-hub/).\n\n---\n\n### Institutional Threat Unit Verification Stamp\n*This vulnerability disclosure has been independently peer-reviewed and authenticated by the incident defense desk at [CyberUpdates365 Threat Intelligence](https://cyberupdates365.com/). All defensive configurations align strictly with CISA Known Exploited Vulnerabilities (KEV) directives and vendor security bulletins as of July 2026.*", "creation_timestamp": "2026-07-29T11:34:43.028376Z"}]}