CVE-2026-65938

An improper authorization vulnerability in the Scheduled Reports API of WhatsUp Gold prior to version 2026.0.2 allows any authenticated user to perform restricted actions, potentially leading to unauthorized access to sensitive reporting features. Organizations using affected versions should prioritize patching to mitigate the risk of data exposure or manipulation. This issue is particularly relevant for system administrators and security teams managing WhatsUp Gold installations.