Common Weakness Enumeration
CWE-40 Path Traversal: '\\UNC\share\name\' (Windows UNC Share)
Description
The product accepts input that identifies a Windows UNC share ('\\UNC\share\name') that potentially redirects access to an unintended location or arbitrary file.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-40 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-h3x4-hc5v-v2gm | CVE-2026-34426 | MODERATE |
OpenClaw: Windows media loaders accepted remote-host file URLs before local path validation |
2026-04-10 | |
| GHSA-pccr-q7v9-5f27 | CVE-2021-44548 | CRITICAL |
Apache Solr Improper Input Validation and Path Traversal |
2022-08-11 |