CVE Catalog
CVE-2026-65941
HighCVSS 8.8Summary
WhatsUp Gold before version 2026.0.2 has a vulnerability allowing an unauthenticated remote attacker to execute arbitrary code in the context of the IIS application service account.
Risk Assessment
Full compromise of the IIS service, potentially leading to confidentiality, integrity, and availability breaches.
Recommendation
Upgrade WhatsUp Gold to version 2026.0.2 or later.
Original NVD description (English source)
In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account.