CVE-2019-12097: Progress Fiddler

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the original EnableLoopback.exe.

Affected products

• Progress Fiddler: version 5.0.20182.28034 only

Published 2019-06-03. Last modified 2026-06-17.