cve.bz

CWE-40: Path Traversal: '\\UNC\share\name\' (Windows UNC Share)

Filter

The product accepts input that identifies a Windows UNC share ('\\UNC\share\name') that potentially redirects access to an unintended location or arbitrary file.

What the weakness is: CWE-40 at MITRE. All weaknesses

Ask an AI about CWE-40

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-40: Path Traversal: '\\UNC\share\name\' (Windows UNC Share) and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/40.html and https://cve.bz/cve/cwe/40?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.1CVE-2026-82819EPSS 0.5%

    A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the …

  2. 8.8CVE-2026-25039EPSS 0.4%

    Parsec is a cloud-based application for simple and cryptographically secure file sharing. The application does not sanitize the workspace name, creating a vulnerability if that workspace name is a UNC path. When creating mountpoint in the …

  3. 8.8CVE-2026-27615EPSS 0.2%

    ADB Explorer is a fluent UI for ADB on Windows. In versions prior to Beta 0.9.26022, ADB-Explorer allows the `ManualAdbPath` settings variable, which determines the path of the ADB binary to be executed, to be set to a Universal Naming Con…

  4. 5.0CVE-2025-32103EPSS 18%

    CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions.

  5. 4.7CVE-2023-29446EPSS 0.2%

    An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.

  6. 9.8CVE-2021-44548EPSS 5.2%

    An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker …