CWE-923 · weakness in Access Control
Improper Restriction of Communication Channel to Intended Endpoints
81 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 1
Every one of the 81 is a mark on the map. Named now: 1 to 26, most at risk first.
- Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
- The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVP…
- An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed wh…
- PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access
- Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
- Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints
- In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comp…
- Azure IoT Explorer Information Disclosure Vulnerability
- Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit th…
- Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy
- International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended Endpoints
- Dataease redshift JDBC Connection Remote Code Execution
- Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated atta…
- Azure SQL Managed Instance Elevation of Privilege Vulnerability
- GateManager does not enforce strict hostname matching for WEB server
- Sudo for Windows Spoofing Vulnerability
- Windows Hyper-V Remote Code Execution Vulnerability
- Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a hard failure to create a tunnel), and thus DNS traffic can leave the device. Data sh…
- Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted
- In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and d…
- Azure Key Vault Client SDK Elevation of Privilege Vulnerability
- A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7…
- An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.
- OpenLDAP SASL authentication bypass
- Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may at…
- Junos OS Evolved: Packets which are not destined to the router can reach the RE
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.