CVE-2026-65939

WhatsUp Gold versions prior to 2026.0.2 are vulnerable to a privilege escalation flaw that allows an authenticated attacker to create a LogToFile action with an arbitrary file extension within the IIS web root, potentially leading to unauthorized file access or execution. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation by malicious insiders or compromised accounts.