CVE-2026-65938

Published August 12, 2026 · Source: nvd

Description

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness

CWE-602

Affected Products

• progress — whatsup gold (< 26.0.2)

References

• [email protected]
• [email protected]
• [email protected]

← Browse all CVEs