{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "BeyondTrust Privileged Remote Access (PRA) bietet privilegierten Benutzern und externen Anbietern sicheren, überwachten Zugriff auf kritische Systeme und IT-Infrastrukturen.\r\nBeyondTrust Remote Support (RS) ermöglicht IT-Teams und Dienstleistern sicheren, interaktiven Fernzugriff zur Unterstützung von Endbenutzern",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in BeyondTrust Privileged Remote Access und BeyondTrust Remote Support ausnutzen, um einen Denial of Service Angriff durchzuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-2215 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2215.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-2215 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2215"
    }, {
      "category" : "external",
      "summary" : "BeyondTrust security advisory vom 2026-07-06",
      "url" : "https://www.beyondtrust.com/trust-center/security-advisories/bt26-03"
    } ],
    "source_lang" : "en-US",
    "title" : "BeyondTrust Privileged Remote Access und Remote Support: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-07-06T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-07-07T08:41:44.955+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-2215",
      "initial_release_date" : "2026-07-06T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-07-06T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<Security Rollup April 2026 25 PRA",
          "product" : {
            "name" : "BeyondTrust Privileged Remote Access <Security Rollup April 2026 25 PRA",
            "product_id" : "T056186"
          }
        }, {
          "category" : "product_version",
          "name" : "Security Rollup April 2026 25 PRA",
          "product" : {
            "name" : "BeyondTrust Privileged Remote Access Security Rollup April 2026 25 PRA",
            "product_id" : "T056186-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:beyondtrust:privileged_remote_access:security_rollup_april_2026_25_pra"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<Security Rollup April 2026 24 PRA",
          "product" : {
            "name" : "BeyondTrust Privileged Remote Access <Security Rollup April 2026 24 PRA",
            "product_id" : "T056187"
          }
        }, {
          "category" : "product_version",
          "name" : "Security Rollup April 2026 24 PRA",
          "product" : {
            "name" : "BeyondTrust Privileged Remote Access Security Rollup April 2026 24 PRA",
            "product_id" : "T056187-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:beyondtrust:privileged_remote_access:security_rollup_april_2026_24_pra"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<PRA 25.3.3",
          "product" : {
            "name" : "BeyondTrust Privileged Remote Access <PRA 25.3.3",
            "product_id" : "T056188"
          }
        }, {
          "category" : "product_version",
          "name" : "PRA 25.3.3",
          "product" : {
            "name" : "BeyondTrust Privileged Remote Access PRA 25.3.3",
            "product_id" : "T056188-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:beyondtrust:privileged_remote_access:pra_25.3.3"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Privileged Remote Access"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<Security Rollup April 2026 25 RS",
          "product" : {
            "name" : "BeyondTrust Remote Support <Security Rollup April 2026 25 RS",
            "product_id" : "T056183"
          }
        }, {
          "category" : "product_version",
          "name" : "Security Rollup April 2026 25 RS",
          "product" : {
            "name" : "BeyondTrust Remote Support Security Rollup April 2026 25 RS",
            "product_id" : "T056183-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:beyondtrust:remote_support:security_rollup_april_2026_25_rs"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<Security Rollup April 2026 24 RS",
          "product" : {
            "name" : "BeyondTrust Remote Support <Security Rollup April 2026 24 RS",
            "product_id" : "T056184"
          }
        }, {
          "category" : "product_version",
          "name" : "Security Rollup April 2026 24 RS",
          "product" : {
            "name" : "BeyondTrust Remote Support Security Rollup April 2026 24 RS",
            "product_id" : "T056184-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:beyondtrust:remote_support:security_rollup_april_2026_24_rs"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<RS 25.3.3",
          "product" : {
            "name" : "BeyondTrust Remote Support <RS 25.3.3",
            "product_id" : "T056185"
          }
        }, {
          "category" : "product_version",
          "name" : "RS 25.3.3",
          "product" : {
            "name" : "BeyondTrust Remote Support RS 25.3.3",
            "product_id" : "T056185-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:beyondtrust:remote_support:rs_25.3.3"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Remote Support"
      } ],
      "category" : "vendor",
      "name" : "BeyondTrust"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-40140",
    "product_status" : {
      "known_affected" : [ "T056183", "T056184", "T056185", "T056186", "T056187", "T056188" ]
    },
    "release_date" : "2026-07-06T22:00:00.000+00:00",
    "title" : "CVE-2026-40140"
  }, {
    "cve" : "CVE-2026-40141",
    "product_status" : {
      "known_affected" : [ "T056183", "T056184", "T056185", "T056186", "T056187", "T056188" ]
    },
    "release_date" : "2026-07-06T22:00:00.000+00:00",
    "title" : "CVE-2026-40141"
  }, {
    "cve" : "CVE-2026-40138",
    "product_status" : {
      "known_affected" : [ "T056183", "T056184", "T056185", "T056186", "T056187", "T056188" ]
    },
    "release_date" : "2026-07-06T22:00:00.000+00:00",
    "title" : "CVE-2026-40138"
  }, {
    "cve" : "CVE-2026-40139",
    "product_status" : {
      "known_affected" : [ "T056183", "T056184", "T056185", "T056186", "T056187", "T056188" ]
    },
    "release_date" : "2026-07-06T22:00:00.000+00:00",
    "title" : "CVE-2026-40139"
  } ]
}