CWE-40 · File and Path Handling
Path Traversal: 'UNCsharename' (Windows UNC Share)
6CVEs
SortMost likely exploited
6 CVEs with CWE-40 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-32103CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames,…CrushFTP · CrushFTP · CVSS 5 · 2025-04-15 | 5.0 | 18% | 2025-04-15 |
| CVE-2021-44548Apache Solr information disclosure vulnerability through DataImportHandlerApache Software Foundation · Apache Solr · 2021-12-23 | – | 5.2% | 2021-12-23 |
| CVE-2026-82819Universal Naming Convention (UNC) Path Injection in Cerberus FTP ServerCerberus · Cerberus FTP Server · CVSS 7.1 · 2026-10-21 | 7.1 | 0.5% | 2026-10-21 |
| CVE-2026-25039The application evaluate UNC path in workspace nameScille · parsec-cloud · CVSS 8.8 · 2026-07-20 | 8.8 | 0.4% | 2026-07-20 |
| CVE-2026-27615ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)Alex4SSB · ADB-Explorer · CVSS 8.8 · 2026-02-25 | 8.8 | 0.2% | 2026-02-25 |
| CVE-2023-29446Improper Input Validation in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX · CVSS 4.7 · 2024-01-10 | 4.7 | 0.2% | 2024-01-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.