Read the docs

WIT

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WIT records in CISA KEV

No WIT vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-83322 CVE-2026-7003 · GHSA-qxh8-8wmv-c8mp

WIT SynApps Runtime exposes hardcoded OAuth client credentials

Priority HIGH 70

WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values embedded in JavaScript delivered to the fro…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00294 Published 2026-10-30 No fix listed CWE-798
TI-2026-83324 CVE-2026-7005 · GHSA-8968-4w4m-2qwf

Browser-mediated SSRF in WIT SynApps Runtime controller onboarding

Priority MEDIUM 57

WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's bro…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00124 Published 2026-10-30 No fix listed CWE-346
TI-2026-83323 CVE-2026-7004 · GHSA-q9pw-h7cq-jxq7

WIT SynApps Runtime reflected XSS via LINK parameter

Priority MEDIUM 56

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00268 Published 2026-10-30 No fix listed CWE-79
Open these records in search →