Skip to content
OpenAdvisories

Weakness (CWE)

CWE-441: Unintended Proxy or Intermediary

Class Draft

The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Enforce the use of strong mutual authentication mechanism between the two parties.

  2. Architecture and Design

    Whenever a product is an intermediary or proxy for
    transactions between two other components, the proxy core
    should not drop the identity of the initiator of the
    transaction. The immutability of the identity of the
    initiator must be maintained and should be forwarded all the
    way to the target.

Source: MITRE CWE-441

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-83548 Exploited Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026