Skip to content
OpenAdvisories
High · 8.0 CVE-2026-65937 EUVD-2026-57262GHSA-c9r8-v9c2-r47m

WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI

Published Aug 12, 2026 · Updated Aug 13, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: WhatsUp Gold

Description

In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.

Affected products

VendorProductAffectedFixed
Progress Software WhatsUp Gold < 26.0.2 26.0.2

References