medium6.8
CVE-2026-65939
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS we…
Impact
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Whatsup Gold | before 26.0.2 |