Skip to content

CWE-941 · weakness in Access Control

Incorrectly Specified Destination in a Communication Channel

9 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause…CVE-2019-18242Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration… · 1.6% likely
  2. Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication ChannelCVE-2025-53899kiteworks · CVSS 7.2 · 1.0% likely

    Kiteworks

  3. Incorrectly Specified Destination in a Communication Channel in usememos/memosCVE-2022-4847usememos · CVSS 8.3 · 0.7% likely

    Usememos

  4. Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker APICVE-2023-33198tgstation · CVSS 6.1 · 0.6% likely

    Tgstation

  5. An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting…CVE-2025-69515CVSS 9.1 · 0.5% likely
  6. Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack.CVE-2024-34947CVSS 9.4 · 0.4% likely
  7. VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability.…CVE-2026-72506National Institute of Information and Communications Techno… · CVSS 5.1 · 0.3% likely
  8. IPv6 UDP sendto(2) bypasses jail loopback restrictionCVE-2026-101303FreeBSD · CVSS 7.5 · 0.2% likely

    FreeBSD

  9. UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of th…CVE-2026-40118Arcserve · CVSS 5.1 · 0.2% likely

    Arcserve

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in