Advisories · Technology

WIT SynApps Runtime.

Every CVE that names WIT SynApps Runtime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-7005 CVE record

CVSS 5.3 Medium

WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller Onboarding
- WIT SynApps Runtime
- CWE-346
Not analysed yet 30 Oct 2026
CVE-2026-7004 CVE record

CVSS 5.1 Medium

WIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter
- WIT SynApps Runtime
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-7003 CVE record

CVSS 6.9 Medium

WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosure
- WIT SynApps Runtime
- Hard-coded credentials
Not analysed yet 30 Oct 2026