CWE-40: Path Traversal: '\\UNC\share\name\' (Windows UNC Share)
The product accepts input that identifies a Windows UNC share ('\\UNC\share\name') that potentially redirects access to an unintended location or arbitrary file.
A kind of CWE-36 Absolute Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- cerberus ftp server Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server 7.1 High
- scille parsec-cloud The application evaluate UNC path in workspace name 8.8 High
- openclaw OpenClaw < 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders 6.9 Medium
- openclaw OpenClaw - Approval Bypass via Environment Variable Normalization 6.9 Medium
- alex4ssb adb-explorer, adb explorer +1 more ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE) 8.8 High
- crushftp CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the ... 5.0 Medium
- ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more Improper Input Validation in PTC's Kepware KEPServerEX 4.7 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- apache solr Apache Solr information disclosure vulnerability through DataImportHandler 9.8 Critical