HIGH 7.7 NVD

CVE-2026-86158

Missing authentication in the local .NET backend (Fiddler.WebUi) of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint O

Missing authentication in the local .NET backend (Fiddler.WebUi) of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate through an unauthenticated localhost HTTP and SignalR RPC channel.

References

https://www.telerik.com/fiddler/fiddler-everywhere/documentation/knowledge-base/kb-securit

Published: 2026-09-29 · Source: NVD · Feed updated: 2026-09-30

This high severity vulnerability with a CVSS score of 7.7 was published on 2026-09-29 via NVD.

vulnfeed aggregates 10239 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.