Threats Tagged 'cwe-923'
View all threats tagged with 'cwe-923'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-923'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-62836: CWE-923: Improper Restriction of Communication Channel to Intended Endpoints in Microsoft Azure SQL Managed InstanceCVE-2026-62836 0 Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. Join the discussion | GCVE Database | 08/06/2026, 22:37:34 UTC Added: 08/07/2026, 05:56:42 UTC |
CVE-2026-62836: CWE-923: Improper Restriction of Communication Channel to Intended Endpoints in Microsoft Azure SQL Managed InstanceCVE-2026-62836 0 Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. Join the discussion | CVE Database V5 | 08/06/2026, 22:37:34 UTC Added: 08/07/2026, 00:27:03 UTC |
CVE-2026-18655 - Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt InjectionCVE-2026-18655 0 Bulletin ID: 2026-070-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/03/2026 12:00 PM PDT Description: AWS Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with Amazon MQ message brokers. We identified CVE-2026-18655, an improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 that may allow a remote unauthenticated actor to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent to a crafted endpoint controlled through a broker hostname introduced in the MCP client context. Impacted versions: <= 2.0.23 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. Join the discussion | AWS Security Bulletins | 08/20/2026, 21:35:57 UTC Added: 08/03/2026, 19:15:42 UTC |
CVE-2026-23904: CWE-923 Improper Restriction of Communication Channel to Intended Endpoints in Apache Software Foundation Apache KyuubiCVE-2026-23904 0 Apache Kyuubi versions from 1.8.0 before 1.12.0 contain a vulnerability in the Engine UI proxy component that allows remote attackers with network access to cause the server to send HTTP requests to arbitrary hosts. This behavior can lead to Server-Side Request Forgery (SSRF) or open-proxy issues. The vulnerability is addressed in version 1.12.0, which disables the proxy by default and requires explicit configuration to enable it safely. Join the discussion | CVE Database V5 | 07/29/2026, 09:07:18 UTC Added: 07/29/2026, 09:37:54 UTC |
Showing 1 to 4 of 4 results