CVE-2026-86157

Name of the Vulnerable Software and Affected Versions Progress Telerik Fiddler Everywhere versions prior to 8.2.0

Description Exposure of privileged Inter-Process Communication (IPC) functionality allows a local, low-privileged attacker to replace the application UI or settings with attacker-controlled content. This is possible if the attacker can modify application launch parameters and persuade a user to start the application. Successful exploitation may lead to the disclosure of OAuth authentication tokens, the execution of locally accessible programs, or the unauthorized modification of application-generated configuration files.

Recommendations Update Progress Telerik Fiddler Everywhere to version 8.2.0 or later.