CVE Catalog
CVE-2026-65938
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions.
Risk Assessment
Unauthorized invocation of restricted actions may lead to confidentiality or integrity breaches of report data.
Recommendation
It is recommended to upgrade to version 2026.0.2 or later and implement proper access controls for the API.
Original NVD description (English source)
In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions.