Vulnerabilities

TI-2026-58947 CVE-2026-86158 · GHSA-rx77-7xhh-crpr

Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere

LOW 34

Missing authentication in the local .NET backend (Fiddler.WebUi) of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certific…

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00087 Published 2026-09-29 Fixed in 8.2.0 CWE-306

TI-2026-58946 CVE-2026-86157 · GHSA-299j-hfrq-4753

Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

LOW 24

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the a…

CVSS 3.1MEDIUM 5.6 Local Low privileges User interaction EPSS 0.00119 Published 2026-09-29 Fixed in 8.2.0 CWE-749

Vulnerabilities

Filters

Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere

Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere