CVE-2026-7003

WIT SynApps Runtime versions through 1.4.11 are vulnerable to a hardcoded credentials vulnerability. Attackers can recover static OAuth clientId and clientSecret values embedded in JavaScript files (such as parameters.js ) delivered to the frontend. These exposed credentials allow unauthenticated...

CVE-2026-7003 WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosure

WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values embedded in JavaScript delivered to the frontend, such as in parameters.js. Attackers can extract these exposed...