A critical remote code execution vulnerability in Progress WhatsUp Gold, a widely used network monitoring tool, has been disclosed, with a proof-of-concept (PoC) exploit now publicly available. This flaw, tracked as CVE-2024-8785, present in NmAPI.exe in versions prior to 24.0.1, allows unauthenticated attackers to modify Windows registry paths and redirect the software’s configuration directory to attacker-controlled locations. Exploiting this vulnerability enables the execution of arbitrary code during service restarts, granting attackers persistent access and the ability to fully compromise the affected system. Rated as Critical with a maximum CVSS score of 9.8/10, the vulnerability is easily exploitable without requiring authentication or user interaction. Progress Software has issued a patch in version 24.0.1, addressing this and other vulnerabilities. CTIX analysts strongly urge administrators to update immediately to protect their systems, as WhatsUp Gold has recently been a frequent target of threat actors leveraging public exploits to gain access to corporate networks. Failure to patch could expose organizations to severe security risks, including unauthorized system control and data compromise.