CVE record · 1 source
CVE-2026-104656
CVSS 7.3Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend…
- Vendor
- Progress Software
- Product
- Progress® Telerik® Fiddler® Everywhere
- CVSS v3.1
- 7.3 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
- Weakness
- CWE-79
- Exposure class
- File transfer
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend…
Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.