CWE-923 · Access Control
Improper Restriction of Communication Channel to Intended Endpoints
81CVEs
SortMost likely exploited
81 CVEs with CWE-923 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-48999Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerabilitydataease · dataease · CVSS 6.8 · 2025-06-03 | 6.8 | 11% | 2025-06-03 |
| CVE-2024-24974The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVP…OpenVPN · OpenVPN 2 · CVSS 7.5 · 2024-07-08 | 7.5 | 9.8% | 2024-07-08 |
| CVE-2022-2663An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed wh…Linux · Linux kernel · 2022-09-01 | – | 4.1% | 2022-09-01 |
| CVE-2019-17440PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root accessPalo Alto Networks · PAN-OS · CVSS 10 · 2019-12-20 | 10.0 | 1.7% | 2019-12-20 |
| CVE-2021-32635Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpointsylabs · singularity · CVSS 6.3 · 2021-05-28 | 6.3 | 1.4% | 2021-05-28 |
| CVE-2018-10596Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended EndpointsMedtronic · 2090 CareLink Programmer · CVSS 7.1 · 2018-07-02 | 7.1 | 1.3% | 2018-07-02 |
| CVE-2017-3891In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comp…BlackBerry · QNX Software Development Platform (QNX SDP) · CVSS 9.6 · 2017-11-14 | 9.6 | 1.3% | 2017-11-14 |
| CVE-2026-23664Azure IoT Explorer Information Disclosure VulnerabilityMicrosoft · Azure IoT Explorer · CVSS 7.5 · 2026-03-10 | 7.5 | 1.1% | 2026-03-10 |
| CVE-2023-28078Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit th…Dell · Dell SmartFabric OS10 · CVSS 9.1 · 2024-02-15 | 9.1 | 0.9% | 2024-02-15 |
| CVE-2026-23904Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxyApache Software Foundation · Apache Kyuubi · CVSS 7.3 · 2026-07-29 | 7.3 | 0.9% | 2026-07-29 |
| CVE-2025-12357International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended EndpointsISO 15118-2 Network and Application Protocol Requirements · EV Car Chargers · CVSS 6.3 · 2025-10-31 | 6.3 | 0.8% | 2025-10-31 |
| CVE-2025-46566Dataease redshift JDBC Connection Remote Code Executiondataease · dataease · CVSS 6.8 · 2025-05-01 | 6.8 | 0.8% | 2025-05-01 |
| CVE-2024-41889Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated atta…Pimax · Pimax Play · CVSS 8.8 · 2024-08-05 | 8.8 | 0.7% | 2024-08-05 |
| CVE-2026-62836Azure SQL Managed Instance Elevation of Privilege VulnerabilityMicrosoft · Azure SQL Managed Instance · CVSS 8.7 · 2026-08-06 | 8.7 | 0.6% | 2026-08-06 |
| CVE-2021-32004GateManager does not enforce strict hostname matching for WEB serverSecomea · GateManager · CVSS 3.7 · 2021-11-22 | 3.7 | 0.6% | 2021-11-22 |
| CVE-2024-43571Sudo for Windows Spoofing VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 5.6 · 2024-10-08 | 5.6 | 0.6% | 2024-10-08 |
| CVE-2025-48807Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6.7 · 2025-08-12 | 6.7 | 0.6% | 2025-08-12 |
| CVE-2024-34446Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a hard failure to create a tunnel), and thus DNS traffic can leave the device. Data sh…No vendor recorded · CVSS 7.5 · 2024-05-03 | 7.5 | 0.6% | 2024-05-03 |
| CVE-2024-47490Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhaustedJuniper Networks · Junos OS Evolved · CVSS 8.2 · 2024-10-11 | 8.2 | 0.6% | 2024-10-11 |
| CVE-2024-6222In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and d…Docker Inc. · Docker Desktop · CVSS 7.3 · 2024-07-09 | 7.3 | 0.6% | 2024-07-09 |
| CVE-2026-85925Azure Key Vault Client SDK Elevation of Privilege VulnerabilityMicrosoft · azure-keyvault-administration · CVSS 8.2 · 2026-10-13 | 8.2 | 0.5% | 2026-10-13 |
| CVE-2024-26013A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7…Fortinet · FortiProxy · CVSS 7.1 · 2025-04-08 | 7.1 | 0.5% | 2025-04-08 |
| CVE-2026-87734An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.OCaml · utcp · CVSS 7.5 · 2026-09-09 | 7.5 | 0.5% | 2026-09-09 |
| CVE-2026-13608OpenLDAP SASL authentication bypasscurl · curl · CVSS 7.4 · 2026-09-06 | 7.4 | 0.5% | 2026-09-06 |
| CVE-2025-31144Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may at…SIOS Technology, Inc. · Quick Agent V3 · CVSS 6.9 · 2025-04-27 | 6.9 | 0.5% | 2025-04-27 |
| CVE-2023-44195Junos OS Evolved: Packets which are not destined to the router can reach the REJuniper Networks · Junos OS Evolved · CVSS 5.4 · 2023-10-12 | 5.4 | 0.5% | 2023-10-12 |
| CVE-2025-20261Cisco Integrated Management Controller Privilege Escalation VulnerabilityCisco · Cisco Unified Computing System (Managed) · CVSS 8.8 · 2025-06-04 | 8.8 | 0.5% | 2025-06-04 |
| CVE-2026-18655Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt InjectionAWS · amazon-mq-mcp-server · CVSS 6.5 · 2026-08-03 | 6.5 | 0.4% | 2026-08-03 |
| CVE-2025-22251An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all v…Fortinet · FortiOS · CVSS 3 · 2025-06-10 | 3.0 | 0.4% | 2025-06-10 |
| CVE-2023-29108IP filter vulnerability in ABAP Platform and SAP Web DispatcherSAP · ABAP Platform and SAP Web Dispatcher · CVSS 5 · 2023-04-11 | 5.0 | 0.4% | 2023-04-11 |
| CVE-2022-2837A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and nam…Coredns.io · coreDNS · CVSS 6.1 · 2023-03-03 | 6.1 | 0.4% | 2023-03-03 |
| CVE-2023-28971Paragon Active Assurance: Enabling the timescaledb enables IP forwardingJuniper Networks · Paragon Active Assurance · CVSS 7.2 · 2023-04-17 | 7.2 | 0.4% | 2023-04-17 |
| CVE-2026-86345389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication resultRed Hat · Red Hat Directory Server 11 · CVSS 9 · 2026-10-01 | 9.0 | 0.4% | 2026-10-01 |
| CVE-2026-63226Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. Whe…Ricoh Company · Ricoh printers and Multifunction Printers (MFPs) · CVSS 6.9 · 2026-07-23 | 6.9 | 0.4% | 2026-07-23 |
| CVE-2026-90461OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.OpenStack · Ironic · CVSS 6.3 · 2026-09-11 | 6.3 | 0.4% | 2026-09-11 |
| CVE-2026-33803Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attackerJuniper Networks · Junos OS Evolved · CVSS 6.5 · 2026-07-09 | 6.5 | 0.4% | 2026-07-09 |
| CVE-2024-39537Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the networkJuniper Networks · Junos OS Evolved · CVSS 6.5 · 2024-07-11 | 6.5 | 0.3% | 2024-07-11 |
| CVE-2025-49734PowerShell Direct Elevation of Privilege VulnerabilityMicrosoft · PowerShell 7.4 · CVSS 7 · 2025-09-09 | 7.0 | 0.3% | 2025-09-09 |
| CVE-2026-101891WatchGuard AP Improper Access Control in API Service Allows Unauthenticated AccessWatchGuard · WatchGuard AP · CVSS 9.3 · 2026-09-28 | 9.3 | 0.3% | 2026-09-28 |
| CVE-2026-119914Windows Setup and Deployment Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6.7 · 2026-11-10 | 6.7 | 0.3% | 2026-11-10 |
| CVE-2026-57028Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attackerJuniper Networks · Junos OS Evolved · CVSS 7.3 · 2026-07-09 | 7.3 | 0.3% | 2026-07-09 |
| CVE-2025-62843QuRouterQNAP Systems Inc. · QuRouter · CVSS 0.9 · 2026-03-20 | 0.9 | 0.3% | 2026-03-20 |
| CVE-2025-29986Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent (…Dell · Common Event Enabler · CVSS 8.3 · 2025-04-08 | 8.3 | 0.3% | 2025-04-08 |
| CVE-2026-92173Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an arbitrar…Meta Platforms, Inc · Meta Horizon OS · CVSS 9.1 · 2026-09-30 | 9.1 | 0.3% | 2026-09-30 |
| CVE-2026-92172Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary appl…Meta Platforms, Inc · Meta Horizon OS · CVSS 8.8 · 2026-09-30 | 8.8 | 0.3% | 2026-09-30 |
| CVE-2026-102085Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attackerJuniper Networks · Junos OS Evolved · CVSS 6.5 · 2026-10-14 | 6.5 | 0.3% | 2026-10-14 |
| CVE-2022-43916IBM App Connect Enterprise Certified Container improper communications restrictionIBM · App Connect Enterprise Certified Container · CVSS 6.8 · 2025-01-30 | 6.8 | 0.3% | 2025-01-30 |
| CVE-2025-61939Columbia Weather Systems MicroServer Improper Restriction of Communication Channel to Intended EndpointsColumbia Weather Systems · MicroServer · CVSS 8.8 · 2026-01-07 | 8.8 | 0.3% | 2026-01-07 |
| CVE-2025-23178Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended EndpointsRibbon Communications · Apollo 9608 · CVSS 7.6 · 2025-04-29 | 7.6 | 0.3% | 2025-04-29 |
| CVE-2026-70212Windows Security Center Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7 · 2026-10-13 | 7.0 | 0.3% | 2026-10-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.