Arbitrary File Extension Vulnerability in WhatsUp Gold by Progress
CVE-2026-65939

6.8MEDIUM

Key Information:

Vendor: Progress Software
Status: Whatsup Gold
Vendor: CVE Published:; 12 August 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-65939?

In WhatsUp Gold versions prior to 2026.0.2, a security vulnerability allows a privileged attacker to create a LogToFile action with a specified arbitrary file extension. This poses a risk to the integrity of files located within the Internet Information Services (IIS) web root, potentially leading to unauthorized access or manipulation of sensitive data. Users of affected versions are advised to upgrade to the latest release to mitigate the risk.