CVE-2026-65937

WhatsUp Gold versions prior to 2026.0.2 are vulnerable to an authenticated attacker who can bypass frontend controls, allowing for the injection of persistent script content. This vulnerability poses a significant risk as it could lead to cross-site scripting (XSS) attacks, potentially compromising user data and application integrity. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.