CVE-2026-65939

Awaiting Analysis Awaiting Analysis - Queue

WhatsUp Gold Path Traversal Vulnerability in IIS Web Root

Publication date: 2026-08-12

Last updated on: 2026-08-28

Assigner: Progress Software Corporation

Description

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-28

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-31

NVD

CVE-2026-65939

EUVD

EUVD-2026-57264

Affected Vendors & Products

Vendor	Product	Version / Range
progress	whatsup_gold	to 2026.0.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability in WhatsUp Gold versions before 2026.0.2 allows a privileged attacker to create a LogToFile action that writes files with arbitrary extensions into the IIS web root. This could enable the attacker to place malicious files in a location where they might be executed or accessed by the web server.

Detection Guidance

Check for unauthorized or suspicious LogToFile actions in WhatsUp Gold configurations. Inspect IIS web root directories for unexpected file extensions or recently modified files. Review application logs for unusual file creation events.

Impact Analysis

An attacker could exploit this to upload malicious files, such as web shells, which could lead to remote code execution, data theft, or further compromise of the system. It may also allow unauthorized access to sensitive data or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Upgrade WhatsUp Gold to version 2026.0.2 or later. Restrict write permissions in the IIS web root. Monitor for unauthorized file creation and review access logs for suspicious activity.

Hi! I’m here to help you understand CVE-2026-65939. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70