Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-65940 EUVD-2026-57266GHSA-wrx3-m3pw-xfmv

WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.

Published Aug 12, 2026 · Updated Aug 12, 2026 · Assigned by ProgressSoftware

Description

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.

Affected products

VendorProductAffectedFixed
Progress Software WhatsUp Gold < 26.0.2 26.0.2

References