Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

CWE-40

6 published CVEs are weaknesses of this kind, as the records or NVD name it.

Atom feed of new CVEsWhat CWE-40 is, at MITRE (opens in a new tab)

Newest CVEs

  • CVE-2026-82819

    Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server

    Cerberus · Cerberus FTP Server

    High7.1
  • CVE-2026-25039

    The application evaluate UNC path in workspace name

    Scille · parsec-cloud

    High8.8
  • CVE-2026-27615

    ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)

    Alex4SSB · ADB-Explorer

    High8.8
  • CVE-2025-32103

    CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at…

    CrushFTP · CrushFTP

    Medium5.0
  • CVE-2023-29446

    Improper Input Validation in PTC's Kepware KEPServerEX

    PTC · Kepware KEPServerEX

    Medium4.7
  • CVE-2021-44548

    Apache Solr information disclosure vulnerability through DataImportHandler

    Apache Software Foundation · Apache Solr

    Critical9.8
All 6 in the list