Critical severity9.8NVD Advisory· Published Aug 12, 2026· Updated Nov 6, 2026

CVE-2026-65941

Description

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress (organisation)/Whatsupgold2 versions
cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*range: <26.0.2
- (no CPE)range: <2026.0.2
WhatsUp Gold/WhatsUp Goldllm-fuzzy
Range: <2026.0.2

Patches

Vulnerability mechanics

References

community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2026nvdVendor Advisory
docs.progress.com/bundle/whatsupgold-release-notes-26-0/page/WhatsUp-Gold-2026.0-Release-Notes.htmlnvdRelease Notes
www.progress.com/network-monitoringnvdProduct

News mentions

Progress WhatsUp Gold: Five Vulnerabilities Including RCE and XSS Disclosed Together
Vypr Intelligence · Aug 12, 2026

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000