Skip to content
OpenAdvisories
High · 7.3 CVE-2026-104656 EUVD-2026-118359GHSA-697r-pc36-hjvx

Cross-site Scripting in Progress Telerik Fiddler Everywhere

Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by ProgressSoftware

Description

Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.

Affected products

VendorProductAffectedFixed
Progress Software Progress® Telerik® Fiddler® Everywhere < 8.3.0 8.3.0

References