CVE catalog 2026 CVE-2026-65xxx CVE-2026-65940 CVE PROGRAM SOURCE RECORD 6.8 Medium
CVE-2026-65940 WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.
Status Published
Published 2026-08-12
Updated 2026-08-12
Assigning organization ProgressSoftware Description In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.
Affected products Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Progress Software Corporation WhatsUp Gold Default version status: unaffected
SEVERITY 6.8 / 10 Medium · CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HScored by ProgressSoftware
Weaknesses CWE-732 CWE-276 Source & freshness Official CVE List V5
View source record ↗ Imported 2026-10-29 20:12:41 UTC
Commit 556c9d3a8cd1