CWE-40 · weakness in File and Path Handling
Path Traversal: 'UNCsharename' (Windows UNC Share)
6 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 1
Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.
- CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames,…
- Apache Solr information disclosure vulnerability through DataImportHandler
- Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server
- The application evaluate UNC path in workspace name
- ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)
- Improper Input Validation in PTC's Kepware KEPServerEX
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.