CWE-941: Incorrectly Specified Destination in a Communication Channel
The product creates a communication channel to initiate an outgoing request to an actor, but it does not correctly specify the intended destination for that actor.
8 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-53899 — Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel
- CVE-2026-69246 — Guzzle: Noncanonical host can bypass host-based checks
- CVE-2026-72506 — VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly spec
- CVE-2026-40118 — UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability.
- CVE-2025-0036 — In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic oper
Recently published
- CVE-2026-72506 — VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly spec
- CVE-2026-69246 — Guzzle: Noncanonical host can bypass host-based checks
- CVE-2026-40118 — UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability.
- CVE-2025-53899 — Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel
- CVE-2025-0036 — In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic oper