Medium · 4.3 CVE-2026-65938 EUVD-2026-57263GHSA-2jfv-5vqq-f9xq

WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.

Published Aug 12, 2026 · Updated Aug 12, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: WhatsUp Gold

Description

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions.

Affected products

Vendor	Product	Affected	Fixed
Progress Software	WhatsUp Gold	< 26.0.2	26.0.2

References

https://www.progress.com/network-monitoring
https://docs.progress.com/bundle/whatsupgold-release-notes-26-0/page/WhatsUp-Gold-2026.0-Release-Notes.html release-notes
https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2026 vendor-advisory