CVE-2026-40144: Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
BeyondTrust Endpoint Privilege Management (Windows deployments)to a version that resolves this vulnerability.Fixed in 26.1.2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-40144?
CVE-2026-40144 has a severity score of 7.3, categorized as high.
How do I fix CVE-2026-40144?
To fix CVE-2026-40144, update BeyondTrust Endpoint Privilege Management to version 26.1.2 or later.
What types of systems are affected by CVE-2026-40144?
CVE-2026-40144 affects Windows deployments of BeyondTrust Endpoint Privilege Management prior to version 26.1.2.
What is the nature of the vulnerability in CVE-2026-40144?
CVE-2026-40144 is a memory corruption vulnerability due to insufficient input validation in a kernel-mode component.
When was CVE-2026-40144 published?
CVE-2026-40144 was published on August 17, 2026.