Progress® Telerik® Fiddler® Everywhere vulnerabilities

2 known vulnerabilities in Progress® Telerik® Fiddler® Everywhere from Progress Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Progress® Telerik® Fiddler® Everywhere: Improper Neutralization of Input During Web Page Generation

  CVE-2026-104656Nov 6, 2026Progress Software

  Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.

• 7.7 High severity

  Progress® Telerik® Fiddler® Everywhere: Missing Authentication for Critical Functionality

  CVE-2026-86158Sep 29, 2026Progress Software

  Missing authentication in the local .NET backend (Fiddler.WebUi) of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate through an unauthenticated localhost