CWE-706: Use of Incorrectly-Resolved Name or Reference
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeIncorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeIncorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a...9.6 Critical
- phpipamphpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache9.3 Critical
- nltkNLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers8.2 High
- microsoft azure web appsAzure Arc Elevation of Privilege Vulnerability10.0 Critical
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore8.7 High
- google chromeIncorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169...6.5 Medium
- cjson project cjsoncJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding8.7 High
- nextlevelbuilder goclawnextlevelbuilder GoClaw exec_approval.go extractBin name resolution5.3 Medium
- filebrowserFile Browser: Colliding username normalization gives two users the same home directory8.1 High
- openclawOpenClaw < 2026.6.9 Authorization Bypass via flock wrapper8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Web filtering doesn't block specifically formatted URLs6.9 Medium
- gitlabUse of Incorrectly-Resolved Name or Reference in GitLab3.5 Low
- devolutions remote desktop managerIncorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions...7.2 High
- devolutions unigetuiUse of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI...7.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can read other users' private notes via Socket.IO5.3 Medium
- encode starletteStarlette: Unvalidated request path concatenated into authority poisons request.url.hostname3.7 Low
- gitlabUse of Incorrectly-Resolved Name or Reference in GitLab4.3 Medium
- pyloadpyLoad: Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory6.5 Medium
- hickory project dnsHickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data...4.0 Medium
- traefik, red hat openshift dev spaces 3.28 +1 moreTraefik: StripPrefixRegex auth bypass via Path/RawPath desync7.8 High
- uutils coreutilsuutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading4.4 Medium
- openfga, openfga helm charts +1 moreOpenFGA has Improper Policy Enforcement5.0 Medium
- openclawOpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys6.3 Medium
- nearform fast-jwtfast-jwt Affected by Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)9.1 Critical
- openclawOpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope Bypass2.3 Low
- openclawOpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat6.3 Medium
- openclawOpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper7.7 High
- openclawOpenClaw < 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chat6.0 Medium
- h3 srvxsrvx is vulnerable to middleware bypass via absolute URI in request line4.8 Medium
- h3h3: Missing Path Segment Boundary Check in `mount()` Causes Middleware Execution on Unrelated Prefix-Matching Routes3.7 Low
- gitlabUse of Incorrectly-Resolved Name or Reference in GitLab4.1 Medium
- tencent weknoraWeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection5.9 Medium
- filebrowserFile Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL8.1 High
- smartertools smartermailSmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path Coercion6.9 Medium
- easyimages2.0 project easyimages2.0An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8...9.8 Critical
- apptainerApptainer ineffective application of selinux and apparmor --security options4.5 Medium
- sylabs singularitySingluarity ineffectively applies of selinux / apparmor LSM process labels4.5 Medium
- google zxArbitrary node_modules Directory Deletion in Google zx5.6 Medium
- underctrl-io commandkitCommandKit exposes incorrect command name in context object for message command aliases6.1 Medium
- honoHono contains a flaw in URL path parsing, potentially leading to path confusion7.5 High
- a10 networks ax series loadbalancerA10 Networks AX Loadbalancer Path Traversal8.8 High
- opennextjs @opennextjs/cloudflare, opennext for cloudflare +1 moreSSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass7.7 High
- cloudflare create-cloudflare, opennextjs opennext for cloudflare +1 moreSSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint7.8 High
- tridium niagara, niagara enterprise security, niagara framework +2 moreImproper Handling of Windows: DATA Alternate Data Stream5.4 Medium
- estatik mortgage calculator estatik, mortgage calculator +1 moreWordPress Mortgage Calculator Estatik plugin <= 2.0.12 - Local File Inclusion Vulnerability7.5 High
- namelessmc namelessNamelessMC Forum Topic Deletion Triggered by Unrelated User Deletion7.3 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability8.1 High
- g5plus essential real estateWordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability8.1 High
- Show moreLoading…