CWE-40: Windows UNC Share
The product accepts input that identifies a Windows UNC share ('\\UNC\share\name') that potentially redirects access to an unintended location or arbitrary file.
5 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-25039 — The application evaluate UNC path in workspace name
- CVE-2025-32103 — CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/
Recently published
- CVE-2026-25039 — The application evaluate UNC path in workspace name
- CVE-2025-32103 — CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/