Common Weakness Enumeration

    CWE Definition / CWE-940

    CWE-940: Improper Verification of Source of a Communication Channel

    The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

    Published:13 Feb 2014
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

    CWE-346: Origin Validation Error