# CWE-923.

Every Advisory and CVE whose sources give the weakness CWE-923, newest first.

## Records, newest first

- [TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost.](https://agentprime.io/advisories/CVE-2026-10756.md)
  `CVE-2026-10756` · CVE record: Hitachi Energy TRO600 Series Firmware · CVSS 7.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-923
- [Wheels CLI: Wheels CLI through 4.1.0 does not verify that the local development server answering its…](https://agentprime.io/advisories/CVE-2026-110909.md)
  `CVE-2026-110909` · CVE record: Wheels Wheels CLI · CVSS 5.0 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-923
- [Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker](https://agentprime.io/advisories/CVE-2026-102085.md)
  `CVE-2026-102085` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-923
- [Windows Security Center Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70212.md)
  `CVE-2026-70212` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-923
- [Azure Key Vault Client SDK Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85925.md)
  `CVE-2026-85925` · CVE record: Microsoft azure-keyvault-administration and 3 more · CVSS 8.2 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-923
- [389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result](https://agentprime.io/advisories/CVE-2026-86345.md)
  `CVE-2026-86345` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-923
- [Meta Platforms, Inc Meta Horizon OS: Prior to v66.0.0.733.524 of Meta Horizon OS…](https://agentprime.io/advisories/CVE-2026-92172.md)
  `CVE-2026-92172` · CVE record: Meta Platforms, Inc Meta Horizon OS · CVSS 8.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-923
- [Meta Platforms, Inc Meta Horizon OS: Prior to v74.0.0.878.1682 of Meta Horizon OS…](https://agentprime.io/advisories/CVE-2026-92173.md)
  `CVE-2026-92173` · CVE record: Meta Platforms, Inc Meta Horizon OS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-923
- [FTP Passive Data Connection Not Bound to the Authenticated Control Peer](https://agentprime.io/advisories/CVE-2026-102727.md)
  `CVE-2026-102727` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.0 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-923
- [WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access](https://agentprime.io/advisories/CVE-2026-101891.md)
  `CVE-2026-101891` · CVE record: WatchGuard WatchGuard AP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Broken access control, CWE-923
- [Missing Firewall Configuration in mH-DEVELOPER](https://agentprime.io/advisories/CVE-2026-82932.md)
  `CVE-2026-82932` · CVE record: F&F Filipowski mH-DEVELOPER · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-923
- [Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications](https://agentprime.io/advisories/CVE-2026-96454.md)
  `CVE-2026-96454` · CVE record: tw93 Pake · CVSS 8.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control, CWE-923
- [Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target](https://agentprime.io/advisories/CVE-2026-91166.md)
  `CVE-2026-91166` · CVE record: warp-tech warpgate · CVSS 5.7 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Weak cryptography or TLS, CWE-923
- [Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-78501.md)
  `CVE-2026-78501` · CVE record: Microsoft Microsoft 365 Copilot's Business Chat · CVSS 8.6 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection, CWE-923
- [OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning](https://agentprime.io/advisories/GHSA-w34q-cm8f-9c5x.md)
  `GHSA-w34q-cm8f-9c5x`, `CVE-2026-81871`, `GO-2026-6508` · Go `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`: affected `<0.21.0`, fixed in `0.21.0` · CVSS 6.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-923
- [OpenStack Ironic: OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote…](https://agentprime.io/advisories/CVE-2026-90461.md)
  `CVE-2026-90461` · CVE record: OpenStack Ironic · CVSS 6.3 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-923
- [An issue was discovered in the utcp package before 0.0.6 for OCaml.](https://agentprime.io/advisories/CVE-2026-87734.md)
  `CVE-2026-87734` · CVE record: OCaml utcp · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-923
- [OpenLDAP SASL authentication bypass](https://agentprime.io/advisories/CVE-2026-13608.md)
  `CVE-2026-13608` · CVE record: curl curl · CVSS 7.4 High · Not analysed yet · Published 6 Sept 2026 · Tags: CWE-923
- [SurrealDB allows bypass of deny-net flags via DNS resolution](https://agentprime.io/advisories/GHSA-m3c3-78fh-w3w7.md)
  `GHSA-m3c3-78fh-w3w7`, `CVE-2025-71390` · crates.io `SurrealDB`: affected `>=2.1.0, <2.1.8 || >=2.2.0, <2.2.6 || >=2.3.0, <2.3.6 || >=3.0.0-alpha.1, <3.0.0-alpha.7`, fixed in `2.1.8`, `2.2.6`, `2.3.6`, `3.0.0-alpha.7` · CVSS 5.8 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Broken access control, CWE-923
- [Azure SQL Managed Instance Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62836.md)
  `CVE-2026-62836` · CVE record: Microsoft Azure SQL Managed Instance · CVSS 8.7 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-923
- [Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection](https://agentprime.io/advisories/CVE-2026-18655.md)
  `CVE-2026-18655` · CVE record: AWS amazon-mq-mcp-server · CVSS 7.1 High · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-923
- [Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy](https://agentprime.io/advisories/CVE-2026-23904.md)
  `CVE-2026-23904` · CVE record: Apache Software Foundation Apache Kyuubi · CVSS 7.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-923
- [Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations.](https://agentprime.io/advisories/CVE-2026-63226.md)
  `CVE-2026-63226` · CVE record: Ricoh Company Ricoh printers and Multifunction Printers (MFPs) · CVSS 6.9 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-923
- [External control of a file path in ASUS Aura Wallpaper Service](https://agentprime.io/advisories/CVE-2026-8920.md)
  `CVE-2026-8920` · CVE record: ASUS Aura Wallpaper Service · CVSS 8.5 High · Not analysed yet · Published 15 Jul 2026 · Tags: Path traversal, CWE-923
- [Fortinet FortiSIEMWindowsAgent: A improper restriction of communication channel to intended endpoints vulnerability in…](https://agentprime.io/advisories/CVE-2026-59841.md)
  `CVE-2026-59841` · CVE record: Fortinet FortiSIEMWindowsAgent · CVSS 6.9 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-923
- [Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker](https://agentprime.io/advisories/CVE-2026-57028.md)
  `CVE-2026-57028` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-923
- [Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker](https://agentprime.io/advisories/CVE-2026-33803.md)
  `CVE-2026-33803` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-923
- [Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions](https://agentprime.io/advisories/CVE-2026-55655.md)
  `CVE-2026-55655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-923
- [Docker Sandboxes ICMP egress restriction bypass after daemon restart](https://agentprime.io/advisories/CVE-2026-12539.md)
  `CVE-2026-12539` · CVE record: Docker Docker Sandboxes · CVSS 5.1 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-665, CWE-923
- [Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution](https://agentprime.io/advisories/CVE-2026-12039.md)
  `CVE-2026-12039` · CVE record: Docker Docker Sandboxes · CVSS 5.7 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-923
- [Multiple Vulnerabilities in watsonx.data](https://agentprime.io/advisories/CVE-2025-36145.md)
  `CVE-2025-36145` · CVE record: IBM watsonx.data · CVSS 5.4 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-923
- [Route Services Firewall Bypass](https://agentprime.io/advisories/CVE-2026-22726.md)
  `CVE-2026-22726` · CVE record: CloudFoundry Foundation Routing release and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-923
- [Inadequate Pod Communication Restrictions, affects watsonx.data](https://agentprime.io/advisories/CVE-2025-36180.md)
  `CVE-2025-36180` · CVE record: IBM watsonx.data · CVSS 5.3 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-923
- [Home Assistant: Unauthenticated App (Add-on) Endpoints Exposed to Local Network via Host Network Mode](https://agentprime.io/advisories/CVE-2026-34205.md)
  `CVE-2026-34205` · CVE record: home-assistant Home Assistant Operating System and 1 more · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-923
- [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2025-36438.md)
  `CVE-2025-36438` · CVE record: IBM Concert · CVSS 5.1 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-923
- [Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API](https://agentprime.io/advisories/CVE-2026-32317.md)
  `CVE-2026-32317` · CVE record: cryptomator android · CVSS 7.6 High · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-346, CWE-354, CWE-451, CWE-923
- [Cryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API](https://agentprime.io/advisories/CVE-2026-32318.md)
  `CVE-2026-32318` · CVE record: cryptomator ios · CVSS 7.6 High · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-346, CWE-354, CWE-451, CWE-923
- [Cryptomator: Tampered vault configuration allows MITM attack on Hub API](https://agentprime.io/advisories/CVE-2026-32303.md)
  `CVE-2026-32303` · CVE record: cryptomator cryptomator · CVSS 7.6 High · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-346, CWE-354, CWE-451, CWE-923
- [QuRouter](https://agentprime.io/advisories/CVE-2025-62843.md)
  `CVE-2025-62843` · CVE record: QNAP Systems Inc. QuRouter · CVSS 0.9 Low · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-923
- [Azure IoT Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-23664.md)
  `CVE-2026-23664` · CVE record: Microsoft Azure IoT Explorer · CVSS 7.5 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-923
- [Siemens Heliox Flex 180 kW EV Charging Station: A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All…](https://agentprime.io/advisories/CVE-2025-27769.md)
  `CVE-2025-27769` · CVE record: Siemens Heliox Flex 180 kW EV Charging Station and 1 more · CVSS 2.4 Low · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-923
- [VMware Workstation/Fusion NAT vulnerability](https://agentprime.io/advisories/CVE-2026-22715.md)
  `CVE-2026-22715` · CVE record: VMware Workstation and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: CWE-923
- [Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture](https://agentprime.io/advisories/CVE-2025-58742.md)
  `CVE-2025-58742` · CVE record: Milner ImageDirector Capture · CVSS 8.5 High · Not analysed yet · Published 20 Jan 2026 · Tags: Hard-coded credentials, CWE-923
- [Columbia Weather Systems MicroServer Improper Restriction of Communication Channel to Intended Endpoints](https://agentprime.io/advisories/CVE-2025-61939.md)
  `CVE-2025-61939` · CVE record: Columbia Weather Systems MicroServer · CVSS 8.7 High · Not analysed yet · Published 7 Jan 2026 · Tags: CWE-923
- [NVIDIA RunAI: NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an…](https://agentprime.io/advisories/CVE-2025-33176.md)
  `CVE-2025-33176` · CVE record: NVIDIA RunAI · CVSS 6.2 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: CWE-923
- [International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended Endpoints](https://agentprime.io/advisories/CVE-2025-12357.md)
  `CVE-2025-12357` · CVE record: ISO 15118-2 Network and Application Protocol Requirements EV Car Chargers · CVSS 5.3 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: CWE-923
- [PowerShell Direct Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49734.md)
  `CVE-2025-49734` · CVE record: Microsoft PowerShell 7.4 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-923
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-48807.md)
  `CVE-2025-48807` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-923
- [Fujitsu Client Computing Limited UpdateNavi: Improper restriction of communication channel to intended endpoints issue exists in…](https://agentprime.io/advisories/CVE-2025-35978.md)
  `CVE-2025-35978` · CVE record: Fujitsu Client Computing Limited UpdateNavi and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 12 Jun 2025 · Tags: CWE-923
- [Fortinet FortiOS: An improper restriction of communication channel to intended endpoints vulnerability…](https://agentprime.io/advisories/CVE-2025-22251.md)
  `CVE-2025-22251` · CVE record: Fortinet FortiOS · CVSS 3.0 Low · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-923
- [Cisco Integrated Management Controller Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-20261.md)
  `CVE-2025-20261` · CVE record: Cisco Cisco Unified Computing System (Managed) and 1 more · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2025 · Tags: CWE-923
- [Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability](https://agentprime.io/advisories/CVE-2025-48999.md)
  `CVE-2025-48999` · CVE record: dataease dataease · CVSS 6.8 Medium · EPSS 0.10 · Not analysed yet · Published 3 Jun 2025 · Tags: Broken access control, CWE-923
- [Dataease redshift JDBC Connection Remote Code Execution](https://agentprime.io/advisories/CVE-2025-46566.md)
  `CVE-2025-46566` · CVE record: dataease dataease · CVSS 6.8 Medium · Not analysed yet · Published 1 May 2025 · Tags: Broken access control, CWE-923
- [An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.](https://agentprime.io/advisories/CVE-2025-32886.md)
  `CVE-2025-32886` · CVE record · CVSS 4.0 Medium · Not analysed yet · Published 1 May 2025 · Tags: CWE-923
- [Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints](https://agentprime.io/advisories/CVE-2025-23178.md)
  `CVE-2025-23178` · CVE record: Ribbon Communications Apollo 9608 · CVSS 7.6 High · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-923
- [SIOS Technology, Inc. Quick Agent V3: Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of…](https://agentprime.io/advisories/CVE-2025-31144.md)
  `CVE-2025-31144` · CVE record: SIOS Technology, Inc. Quick Agent V3 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-923
- [Fortinet FortiProxy: A improper restriction of communication channel to intended endpoints vulnerability…](https://agentprime.io/advisories/CVE-2024-26013.md)
  `CVE-2024-26013` · CVE record: Fortinet FortiProxy and 2 more · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-923
- [Dell Common Event Enabler: Dell Common Event Enabler, version(s) CEE 9.0.0.0…](https://agentprime.io/advisories/CVE-2025-29986.md)
  `CVE-2025-29986` · CVE record: Dell Common Event Enabler · CVSS 8.3 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-923
- [Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potenti…](https://agentprime.io/advisories/CVE-2024-39271.md)
  `CVE-2024-39271` · CVE record: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software · CVSS 2.0 Low · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-923
- [IBM App Connect Enterprise Certified Container improper communications restriction](https://agentprime.io/advisories/CVE-2022-43916.md)
  `CVE-2022-43916` · CVE record: IBM App Connect Enterprise Certified Container · CVSS 6.8 Medium · Not analysed yet · Published 30 Jan 2025 · Tags: CWE-923

Older: <https://agentprime.io/advisories/tag/cwe-923.md?cursor=WyIyMDI1LTAxLTMwVDEyOjA0OjQ3LjI1OTAwMFoiLCJDVkUtMjAyMi00MzkxNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-923>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-923/>. Everything for agents: <https://agentprime.io/llms.txt>.