CVE-2026-65941: whatsup gold before 26.0.2 (exclusive); +1 more affected products

CVE-2026-65941. CVSS 3.1 base score 8.8 (HIGH, Vendor/CNA). EPSS 0.00678 (percentile 0.51756), scored 22-Oct-2026.

Affected technology

whatsup gold · before 26.0.2 (exclusive)
progress

WhatsUp Gold · 0 to before 26.0.2
Progress Software Corporation

Description’s affected range: versions released before 2026.0.2

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account. Vendor/CNA’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.

Published 24-Oct-2026 01:43 UTC

CWE: CWE-73, CWE-94, CWE-306, CWE-918
CCR priority: 35.4 /100 (P4)
CVSS 3.1: 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Vendor/CNA
EPSS: 0.00678 · percentile 0.51756 · 2026-10-22
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-24 01:40:49.068977+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-65941.html