CVE-2026-86157
Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere
CVSS Score
5.6
EPSS Score
0.0%
EPSS Percentile
0th
Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled content. Successful exploitation could result in disclosure of OAuth authentication tokens, execution of locally accessible programs, or unauthorized modification of application-generated configuration files.
| CWE | CWE-749 |
| Vendor | progress software |
| Product | progress® telerik® fiddler® everywhere |
| Published | Sep 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for progress software progress® telerik® fiddler® everywhere
Be the first to know when new medium vulnerabilities affecting progress software progress® telerik® fiddler® everywhere are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None
Affected Versions
Progress Software / Progress® Telerik® Fiddler® Everywhere
1.0.0 < 8.2.0
References
Credits
whizarre