CWEweakness

CWE-706 Use of Incorrectly-Resolved Name or Reference

Official page ↗
Abstraction
Class
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

Common consequences

• Confidentiality, Integrity: Read Application Data, Modify Application Data

Detection methods

• Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)

Related

Attack pattern · CAPEC (4)

  • CAPEC-159 Redirect Access to Libraries attack pattern
  • CAPEC-177 Create files with the same name as files protected with a higher classification attack pattern
  • CAPEC-48 Passing Local Filenames to Functions That Expect a URL attack pattern
  • CAPEC-641 DLL Side-Loading attack pattern

Child of · CWE (1)

  • CWE-664 Improper Control of a Resource Through its Lifetime weakness

Peer of · CWE (1)

  • CWE-99 Improper Control of Resource Identifiers weakness

Referenced by CAPEC · weakness (4)

  • CAPEC-159 Redirect Access to Libraries attack pattern
  • CAPEC-177 Create files with the same name as files protected with a higher classification attack pattern
  • CAPEC-48 Passing Local Filenames to Functions That Expect a URL attack pattern
  • CAPEC-641 DLL Side-Loading attack pattern

Referenced by CVE · weakness (161)

  • CVE-2026-89313 `JwksTrustStore.Get` assigned each parsed key to the function's **named return value** while refreshing the JWKS cache. vulnerability
  • CVE-2026-114663 Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name… vulnerability
  • CVE-2026-14288 GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that… vulnerability
  • CVE-2026-112909 filelock is a platform-independent file lock for Python. vulnerability
  • CVE-2026-92262 MariaDB server is a community developed fork of MySQL server. vulnerability
  • CVE-2026-61844 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. vulnerability
  • CVE-2026-110156 Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had… vulnerability
  • CVE-2026-78359 OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. vulnerability
  • CVE-2026-107822 MariaDB server is a community developed fork of MySQL server. vulnerability
  • CVE-2026-106181 Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the… vulnerability
  • CVE-2026-106230 Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had… vulnerability
  • CVE-2026-106274 Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social… vulnerability
  • CVE-2026-106279 Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised… vulnerability
  • CVE-2026-106308 Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging… vulnerability
  • CVE-2026-106325 Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to… vulnerability
  • CVE-2026-106409 Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had… vulnerability
  • CVE-2026-95106 Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. vulnerability
  • CVE-2026-95275 Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy… vulnerability
  • CVE-2026-95334 Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the… vulnerability
  • CVE-2026-85491 Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a… vulnerability
  • CVE-2026-87720 Incorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ProjectCache eviction logic… vulnerability
  • CVE-2026-77605 Notepad++ is a free and open-source source code editor. vulnerability
  • CVE-2026-92951 vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check that uses non-exact substring… vulnerability
  • CVE-2026-93375 Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially… vulnerability
  • CVE-2026-25825 An issue was discovered in Keyfactor SignServer before 7.6.0. vulnerability
  • CVE-2026-88621 OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload() method in class/Api.php. vulnerability
  • CVE-2026-91727 Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised… vulnerability
  • CVE-2026-87547 Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… vulnerability
  • CVE-2026-87562 Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially… vulnerability
  • CVE-2026-87613 Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute… vulnerability
Show all 161 ›

Referenced by CWE · child of (8)

  • CWE-178 Improper Handling of Case Sensitivity weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-386 Symbolic Name not Mapping to Correct Object weakness
  • CWE-41 Improper Resolution of Path Equivalence weakness
  • CWE-59 Improper Link Resolution Before File Access weakness
  • CWE-66 Improper Handling of File Names that Identify Virtual Resources weakness
  • CWE-827 Improper Control of Document Type Definition weakness
  • CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program weakness

Referenced by CWE · has member (1)

  • CWE-1003 Weaknesses for Simplified Mapping of Published Vulnerabilities view

Referenced by CWE · peer of (1)

  • CWE-99 Improper Control of Resource Identifiers weakness

Referenced by OWASP · mapped cwe (1)

  • A01:2021 Broken Access Control Top 10 2021