File Write Vulnerability in WhatsUp Gold by Progress Software
CVE-2026-65940

6.8MEDIUM

Key Information:

Vendor

Progress Software
Status
Whatsup Gold
Vendor
CVE Published:
12 August 2026

What is CVE-2026-65940?

In versions of WhatsUp Gold prior to 2026.0.2, a security flaw allows a privileged attacker to write arbitrary files to a web-accessible location on the host server. This vulnerability could lead to unauthorized data exposure or manipulation, highlighting the need for immediate updates and robust security practices for users.

Affected Version(s)

WhatsUp Gold Windows 0 < 26.0.2

References

https://www.progress.com/network-monitoring
https://docs.progress.com/bundle/whatsupgold-release-note...
release-notes
https://community.progress.com/s/article/WhatsUp-Gold-Sec...
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.