Live › vulnerability › CVE-2026-7005
WIT SynApps Runtime through 1.4.11 lets an attacker supply an arbitrary target address during controller onboarding, so a victim's browser sends discovery requests to that host. An attacker can use this to probe loopback, local and internal-only network hosts and start enrollment against REDY instances.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Teams running WIT SynApps Runtime 1.4.11 or earlier, especially where the application reaches internal or OT networks and REDY controllers. The issue depends on a browser of a user of the application making the requests, so exposure is tied to who can reach the onboarding flow. unknown whether any particular deployment setting changes exposure.
No product ranges from the sources yet.
1.4.11 or earlier.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as /easy/GUI/Skins/Default/SiteLogo and /easy/GUI/Skins/Default/Identity. Attackers can leverage the victim's browser reachability to probe loopback addresses, local hostnames, or internal-only network hosts and initiate the enrollment flow against REDY instances, crossing IT/OT segmentation boundaries through a sanctioned application path.
This page as .md · .json · in your agent: get_signal("CVE-2026-7005")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.