CWE-941 · Access Control
Incorrectly Specified Destination in a Communication Channel
9CVEs
SortMost likely exploited
9 CVEs with CWE-941 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-18242In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause…Moxa · Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration… · 2020-03-24 | – | 1.6% | 2020-03-24 |
| CVE-2025-53899Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channelkiteworks · security-advisories · CVSS 7.2 · 2025-11-29 | 7.2 | 1.0% | 2025-11-29 |
| CVE-2022-4847Incorrectly Specified Destination in a Communication Channel in usememos/memosusememos · usememos/memos · CVSS 8.3 · 2022-12-29 | 8.3 | 0.7% | 2022-12-29 |
| CVE-2023-33198Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker APItgstation · tgstation-server · CVSS 6.1 · 2023-05-30 | 6.1 | 0.6% | 2023-05-30 |
| CVE-2025-69515An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting…No vendor recorded · CVSS 9.1 · 2026-04-07 | 9.1 | 0.5% | 2026-04-07 |
| CVE-2024-34947Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack.No vendor recorded · CVSS 9.4 · 2024-05-20 | 9.4 | 0.4% | 2024-05-20 |
| CVE-2026-72506VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability.…National Institute of Information and Communications Techno… · "VoiceTra(Voice Translator)" for Android · CVSS 5.1 · 2026-08-13 | 5.1 | 0.3% | 2026-08-13 |
| CVE-2026-101303IPv6 UDP sendto(2) bypasses jail loopback restrictionFreeBSD · FreeBSD · CVSS 7.5 · 2026-10-15 | 7.5 | 0.2% | 2026-10-15 |
| CVE-2026-40118UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of th…Arcserve · UDP Console · CVSS 5.1 · 2026-04-16 | 5.1 | 0.2% | 2026-04-16 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.