In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.8 · progressNVD modified 2026-10-23 20:10
Affected (CPE criteria) 1
cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*