What’s Vulnerable › Vulnerabilities

CVE-2026-40144: Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)

• Severity: high (CVSS 7.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-17 · updated 2026-08-18
• Weakness: CWE-125

Description

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds.

Affected products

• BeyondTrust Endpoint Privilege Management (Windows deployments): before 26.1.2 — fixed in 26.1.2

How to fix

Upgrade to a fixed version: BeyondTrust Endpoint Privilege Management (Windows deployments) 26.1.2. Check the vendor advisory for mitigations.

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-40144
• https://www.beyondtrust.com/trust-center/security-advisories/bt26-04

Get alerted when CVE-2026-40144 or the next vulnerability affects your stack