Skip to content
OpenAdvisories

Product · WIT

SynApps Runtime

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-7005

    WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller Onboarding

    WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to att…

    WIT SynApps Runtime
  • Medium 6.1
    CVE-2026-7004

    WIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter

    WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK query parameter to the /System/Session-…

    WIT SynApps Runtime
  • Medium 5.3
    CVE-2026-7003

    WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosure

    WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values embedded in JavaScript delivered to the frontend, such as in parameters.js. Attack…

    WIT SynApps Runtime