← Database

CVE-2026-65939

MEDIUM CVSS: 6.8 Published: 2026-08-12 Modified: 2026-08-13

Description

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root.

Affected Platforms

Unknown

Weakness Type

CWE-22, CWE-73, CWE-434

References