PT-2026-71120 · Progress+1 · Whatsup Gold+1
CVE-2026-65939
·
Published
2026-08-12
·
Updated
2026-09-02
CVSS v3.1
6.8
Medium
| Vector | AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
WhatsUp Gold versions prior to 2026.0.2
Description
A privileged attacker can create a LogToFile action that allows the specification of an arbitrary file extension within the IIS web root. IIS (Internet Information Services) is a flexible, general-purpose web server from Microsoft.
Recommendations
Update to version 2026.0.2.
Fix
Path traversal
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Iis
Whatsup Gold