---
id: "CVE-2026-7005"
kind: "vulnerability"
aliases: ["CVE-2026-7005"]
title: "WIT SynApps Runtime: browser forgery probes internal hosts during controller onboarding"
severity: "medium"
cvss: 6.1
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["ot-networks", "other", "redy", "wit-synapps"]
not_affected_if: ["unknown"]
published_at: "2026-10-30T19:19:13+00:00"
first_seen_at: "2026-10-30T19:25:31+00:00"
updated_at: "2026-10-30T19:26:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7005", "first_seen_at": "2026-10-30T19:25:31+00:00"}]
---

# WIT SynApps Runtime: browser forgery probes internal hosts during controller onboarding

WIT SynApps Runtime through 1.4.11 lets an attacker supply an arbitrary target address during controller onboarding, so a victim's browser sends discovery requests to that host. An attacker can use this to probe loopback, local and internal-only network hosts and start enrollment against REDY instances.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the WIT SynApps Runtime is installed and its version is `1.4.11` or earlier.

## Timeline

- 2026-10-30T19:25:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-7005

## From the sources

WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as /easy/GUI/Skins/Default/SiteLogo and /easy/GUI/Skins/Default/Identity. Attackers can leverage the victim's browser reachability to probe loopback addresses, local hostnames, or internal-only network hosts and initiate the enrollment flow against REDY instances, crossing IT/OT segmentation boundaries through a sanctioned application path.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_