Weakness (CWE)

CWE-941: Incorrectly Specified Destination in a Communication Channel

Base Incomplete

The product creates a communication channel to initiate an outgoing request to an actor, but it does not correctly specify the intended destination for that actor.

Source: MITRE CWE-941

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 5.4

CVE-2026-72506

VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly spe…

National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for iOS "VoiceTra(Voice Translator)" for Android Android iOS

Aug 13, 2026
Medium 5.9

CVE-2026-67355

guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent ho…

guzzle guzzle guzzlehttp/guzzle guzzle Debian Ubuntu Packagist

Aug 1, 2026
Medium 6.3

CVE-2026-40118

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability…

Arcserve UDP Console

Apr 16, 2026
Medium 6.1

CVE-2023-33198

Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API

tgstation-server is a production scale tool for BYOND server management. The DreamMaker API (DMAPI) chat channel cache can possibly be poisoned by a tgstation-server (TGS) restart and reattach. This can result in sending chat messages to one of any of the con…

tgstation tgstation-server

May 30, 2023