PT-2026-71122

CVE-2026-65941

·

Published

2026-08-12

·

Updated

2026-09-02

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WhatsUp Gold versions prior to 2026.0.2
Description An unauthenticated remote attacker with network access to the affected service can execute arbitrary code within the context of the IIS application service account.
Recommendations Update to version 2026.0.2.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-918: Server-Side Request Forgery (SSRF)
CWE-306: Missing Authentication for Critical Function
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
CWE-73: External Control of File Name or Path
Related identifiers
CVE-2026-65941
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com