Threats tagged 'ghsa-8968-4w4m-2qwf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-7005WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows Medium5.32026-10-30GCVE DatabaseCVE-2026-7005 WIT SynApps Runtime versions through 1.4.11 have a cross-origin request forgery (CSRF) vulnerability that allows attackers to manipulate the victim's browser to send discovery requests to attacker-controlled hosts during controller onboarding. This can be used to probe internal network resources and cross IT/OT segmentation boundaries via a legitimate application path. Report on CVE-2026-7005 Vulnerability CWE-346 #ghsa-8968-4w4m-2qwf	GCVE Database	2026-10-30

Page 1 of 1