CVE-2026-86157
Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere
Progress Software Progress® Telerik® Fiddler® Everywhere
CVSS
5.6MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 8.2.0Progress® Telerik® Fiddler® EverywhereCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled content. Successful exploitation could result in disclosure of OAuth authentication tokens, execution of locally accessible programs, or unauthorized modification of application-generated configuration files.
Text from CVE List
Affected versions 1
- Progress® Telerik® Fiddler® Everywhereaffected: 1.0.0 before 8.2.0CVE List