CVE PROGRAM SOURCE RECORD8.0 High
CVE-2026-65937
WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI
- Status
- Published
- Published
- Updated
- Assigning organization
- ProgressSoftware
Description
In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Progress Software Corporation WhatsUp Gold
Default version status: unaffected