---
id: "CVE-2024-6670"
kind: "vulnerability"
aliases: ["CVE-2024-6670"]
title: "progress whatsup gold: In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "package"
products: [{"name": "progress whatsup gold", "fixed": ["24.0"], "affected": "< 24.0", "ecosystem": "vendor"}, {"name": "Progress WhatsUp Gold", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "package", "ransomware", "self-hosted", "whatsup-gold", "windows"]
not_affected_if: ["default-config"]
published_at: "2024-08-29T22:15:05+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-24T00:09:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-6670", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6670", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# progress whatsup gold: In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker…

Progress WhatsUp Gold, a network monitoring product, has a SQL injection flaw that lets an unauthenticated attacker pull the stored encrypted password of the user when the application has only one user configured. CISA lists it as exploited in the wild and tied to ransomware campaigns.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:progress whatsup gold affected < 24.0 fixed 24.0
- vendor:Progress WhatsUp Gold affected ? fixed ?

## How to check

Check the WhatsUp Gold version in the product's About page or install directory against the vendor advisory; the sources do not give a command.

## Fix

Apply the vendor mitigations per Progress's instructions, or discontinue use of the product if mitigations are unavailable (per CISA's required action).

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-6670
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-6670

## From the sources

Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.

CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_