Vulnerability intelligence

CVE-2026-40145

BeyondTrust Endpoint Privilege Management (Windows deployment) CWE-1220

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.

CVSS Score

7.1

High

EPSS — Exploit Probability

0.2%

Riskier than 4% of all CVEs · checked 2026-10-02

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories