CVE Catalog
CVE-2026-65937
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk0.24%
16th percentile - higher than 16% of all known CVEs
Summary
WhatsUp Gold before version 2026.0.2 has a vulnerability allowing an authenticated attacker to bypass frontend controls and inject persistent script content.
Risk Assessment
Risk of malicious script execution in other users' browsers, potentially leading to session theft or other attacks.
Recommendation
Upgrade WhatsUp Gold to version 2026.0.2 or later.
Original NVD description (English source)
In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.