CVE Catalog
CVE-2026-65940
MediumCVSS 6.8Summary
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.
Risk Assessment
The ability to write arbitrary files to a web-accessible directory may lead to execution of malicious code or server compromise.
Recommendation
It is recommended to upgrade to version 2026.0.2 or later and restrict write permissions in web directories.
Original NVD description (English source)
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.