Live · 98 sources · updated 10m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 1 source

CVE-2026-104656

CVSS 7.3

Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend…

Vendor
Progress Software
Product
Progress® Telerik® Fiddler® Everywhere
CVSS v3.1
7.3 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Weakness
CWE-79
Exposure class
File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. CVE NVD

    Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend…

    Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help