Skip to content
Noroxi

CWE-923 · 70 records

Improper Restriction of Communication Channel to Intended Endpoints

CVEs in this class

70 records

  • CVE-2019-17440
    40Plan

    PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access

    CriticalCVSS 9.8No exploitEPSS 1%

    paloaltonetworks · pan-osDec 20, 2019

  • CVE-2026-62836
    40Plan

    Azure SQL Managed Instance Elevation of Privilege Vulnerability

    CriticalCVSS 10.0No exploitEPSS 0%

    microsoft · azure sql managed instanceAug 6, 2026

  • CVE-2024-41889
    39Monitor

    Multiple Pimax products accept WebSocket connections from unintended endpoints.

    CriticalCVSS 9.8No exploitEPSS 0%

    pimax · pitoolAug 5, 2024

  • CVE-2017-3891
    38Monitor

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX

    CriticalCVSS 9.6No exploitEPSS 1%

    blackberry · qnx software development platformNov 14, 2017

  • CVE-2026-34205
    38Monitor

    Home Assistant: Unauthenticated App (Add-on) Endpoints Exposed to Local Network via Host Network Mode

    CriticalCVSS 9.6No exploitEPSS 0%

    home-assistant · home assistant operating systemMar 27, 2026

  • CVE-2023-28078
    36Monitor

    Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured.

    CriticalCVSS 9.1No exploitEPSS 0%

    dell · smartfabric os10Feb 15, 2024

  • CVE-2026-86345
    36Monitor

    389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

    CriticalCVSS 9.0No exploitEPSS 0%

    red hat · red hat directory server 11Oct 2, 2026

  • CVE-2026-92173
    36Monitor

    Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculu

    CriticalCVSS 9.1No exploitEPSS 0%

    meta platforms, inc · meta horizon osSep 30, 2026

  • CVE-2022-43916
    36Monitor

    IBM App Connect Enterprise Certified Container improper communications restriction

    CriticalCVSS 9.1No exploitEPSS 0%

    ibm · app connect enterprise certified containerJan 30, 2025

  • CVE-2025-20261
    35Monitor

    Cisco Integrated Management Controller Privilege Escalation Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    cisco · cisco unified computing system (managed)Jun 4, 2025

  • CVE-2026-92172
    35Monitor

    Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.hori

    HighCVSS 8.8No exploitEPSS 0%

    meta platforms, inc · meta horizon osSep 30, 2026

  • CVE-2025-61939
    34Monitor

    Columbia Weather Systems MicroServer Improper Restriction of Communication Channel to Intended Endpoints

    HighCVSS 8.7No exploitEPSS 0%

    columbiaweather · weather microserver firmwareJan 7, 2026

  • CVE-2024-24974
    33Monitor

    The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker

    HighCVSS 7.5No exploitEPSS 9%

    openvpn · openvpnJul 8, 2024

  • CVE-2025-29986
    33Monitor

    Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to Intended Endpoints vulnera

    HighCVSS 8.3No exploitEPSS 0%

    dell · common event enablerApr 8, 2025

  • CVE-2026-85925
    32Monitor

    Azure Key Vault Client SDK Elevation of Privilege Vulnerability

    HighCVSS 8.2No exploitEPSS 0%

    microsoft · azure-keyvault-administration4 days ago

  • CVE-2024-26131
    31Monitor

    Element Android Intent Redirection

    HighCVSS 7.8No exploitEPSS 0%

    element · elementFeb 28, 2024

  • CVE-2026-23664
    30Monitor

    Azure IoT Explorer Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    microsoft · azure iot explorerMar 10, 2026

  • CVE-2024-34446
    30Monitor

    Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a hard failure to create a tunnel), and thus DN

    HighCVSS 7.5No exploitEPSS 0%

    May 3, 2024

  • CVE-2024-47490
    30Monitor

    Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted

    HighCVSS 7.7No exploitEPSS 0%

    juniper · junos os evolvedOct 11, 2024

  • CVE-2024-26013
    30Monitor

    A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.

    HighCVSS 7.5No exploitEPSS 0%

    fortinet · fortianalyzerApr 8, 2025

  • CVE-2026-87734
    30Monitor

    An issue was discovered in the utcp package before 0.0.6 for OCaml.

    HighCVSS 7.5No exploitEPSS 0%

    ocaml · utcpSep 9, 2026

  • CVE-2025-23178
    30Monitor

    Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

    HighCVSS 7.6No exploitEPSS 0%

    ribbon communications · apollo 9608Apr 29, 2025

  • CVE-2026-59841
    30Monitor

    A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 ma

    HighCVSS 7.5No exploitEPSS 0%

    fortinet · fortisiemJul 14, 2026

  • CVE-2025-36180
    30Monitor

    Inadequate Pod Communication Restrictions, affects watsonx.data

    HighCVSS 7.5No exploitEPSS 0%

    ibm · watsonx.dataApr 30, 2026

  • CVE-2024-47125
    30Monitor

    Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro

    HighCVSS 7.6No exploitEPSS 0%

    gotenna · gotenna proSep 26, 2024

All vulnerability classes