CVE-2026-65937
Received Received - Intake

Authenticated Stored XSS in WhatsUp Gold

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: Progress Software Corporation

Description
In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-65937
EUVD
EUVD-2026-57262

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
progress whatsup_gold to 2026.0.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in WhatsUp Gold versions before 2026.0.2. An authenticated attacker can bypass frontend controls to inject persistent script content, which could lead to stored cross-site scripting (XSS) attacks.

Impact Analysis

An attacker could exploit this to execute malicious scripts in the context of the application, potentially stealing user sessions, data, or performing unauthorized actions. The CVSS score of 8.0 indicates high severity for confidentiality, integrity, and availability impacts.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR (data protection) and HIPAA (health information privacy) requirements. Compliance may be compromised if sensitive data is exposed or altered due to the attack.

Mitigation Strategies

Update WhatsUp Gold to version 2026.0.2 or later to address the vulnerability. Ensure all instances are patched as soon as possible since the issue involves authenticated attackers bypassing frontend controls.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65937. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart