Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-40

6 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 6 in the listAtom feed of new CVEsWhat CWE-40 is, at MITRE (opens in a new tab)
Published CVEs
6
Last 12 months
3
Critical
1
Known exploited
0

Critical 1High 3Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20211
  2. 20241
  3. 20251
  4. 20263

Newest CVEs

  • CVE-2026-82819

    Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server

    Cerberus · Cerberus FTP Server

    High7.1
  • CVE-2026-25039

    The application evaluate UNC path in workspace name

    Scille · parsec-cloud

    High8.8
  • CVE-2026-27615

    ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)

    Alex4SSB · ADB-Explorer

    High8.8
  • CVE-2025-32103

    CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at…

    CrushFTP · CrushFTP

    Medium5.0
  • CVE-2023-29446

    Improper Input Validation in PTC's Kepware KEPServerEX

    PTC · Kepware KEPServerEX

    Medium4.7
  • CVE-2021-44548

    Apache Solr information disclosure vulnerability through DataImportHandler

    Apache Software Foundation · Apache Solr

    Critical9.8

Vendors it comes up for most

  1. Alex4SSB1
  2. Apache Software Foundation1
  3. Cerberus1
  4. CrushFTP1
  5. PTC1
  6. Scille1