Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: WIT Clear all filters
TI-2026-83324 CVE-2026-7005 · GHSA-8968-4w4m-2qwf

Browser-mediated SSRF in WIT SynApps Runtime controller onboarding

Priority MEDIUM 57

WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's bro…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00124 Published 2026-10-30 No fix listed CWE-346
TI-2026-83323 CVE-2026-7004 · GHSA-q9pw-h7cq-jxq7

WIT SynApps Runtime reflected XSS via LINK parameter

Priority MEDIUM 56

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00268 Published 2026-10-30 No fix listed CWE-79
TI-2026-83322 CVE-2026-7003 · GHSA-qxh8-8wmv-c8mp

WIT SynApps Runtime exposes hardcoded OAuth client credentials

Priority HIGH 70

WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values embedded in JavaScript delivered to the fro…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00294 Published 2026-10-30 No fix listed CWE-798