CVE-2026-104656
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
40/100
Published: 2026-11-06
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Auth
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Required
S:
Unchanged
C:
High
I:
High
A:
Low
Description
Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| Progress Software | Progress® Telerik® Fiddler® Everywhere | 0 < 8.3.0 |
| Progress Software | Progress® Telerik® Fiddler® Everywhere | 0 < 8.3.0 |
References & Advisories (1)
vendor-advisory