CVE-2026-104656highCWE-79

CVE-2026-104656: high-severity vulnerability in Progress® Telerik® Fiddler® Everywhere

Cross-site Scripting in Progress Telerik Fiddler Everywhere

Published

Follow this CVE+ Monitor Progress® Telerik® Fiddler® Everywhere

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3
Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Affected products
Progress Software · Progress® Telerik® Fiddler® Everywhere
Related CVEs — Progress® Telerik® Fiddler® Everywhere

In the same product, most dangerous first.

CVE-2026-86157MEDIUMExposure of Privileged IPC Functionality in Progress Telerik Fiddler EverywhereEPSS 0.1%CVE-2026-86158HIGHMissing Authentication in the local .NET backend of Progress Telerik Fiddler EverywhereEPSS 0.1%