CWE-41

CWE-41 · 6 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-41, highest CVSS first.

  1. HIGH 8.8CVE-2026-881362026-10-13

    Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-1084632026-10-13

    Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.8CVE-2026-1022172026-10-13

    Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.8CVE-2026-701842026-10-13

    Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 7.7CVE-2026-1022312026-10-13

    Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 5.3CVE-2026-93709public PoC2026-09-22

    Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows ca…

    AI risk analysis on Exploit-DB.ai →