Skip to content
OpenAdvisories

Product · Progress Software

Progress® Telerik® Fiddler® Everywhere

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-104656

    Cross-site Scripting in Progress Telerik Fiddler Everywhere

    Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.

    Progress Software Progress® Telerik® Fiddler® Everywhere
  • High 7.7
    CVE-2026-86158

    Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere

    Missing authentication in the local .NET backend (Fiddler.WebUi) of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate through an unauthenticated localhos…

    Progress Software Progress® Telerik® Fiddler® Everywhere