CVE-2026-65938

—

CVSS 3.1

4.3 medium

EPSS

<1%p6

Published

Aug 12, 2026 (Aug 12, 2026)

Modified

Sep 2, 2026

Description

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions.

Vendors: progress
Products: whatsup gold
Weakness: CWE-602, CWE-862
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.