Is CVE-2026-40138 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-40138 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-40138

Two critical authentication bypasses in BeyondTrust RS and PRA join a cPanel/WHM KEV entry from the same month — both granting privileged infrastructure control via a web-accessible login.

2026

What WebPulse reported · 1 analysis

BeyondTrust Auth Bypass Flaws Leave ~2,000 Instances Internet-Reachable

Two critical authentication bypasses in BeyondTrust RS and PRA join a cPanel/WHM KEV entry from the same month — both granting privileged infrastructure control

July 8, 2026

View CVE-2026-40138 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-9082 CVE-2026-8206 CVE-2026-50549 CVE-2026-50548 CVE-2026-48019 CVE-2026-35273 CVE-2026-11645 CVE-2026-8181