Common Weakness Enumeration

    CWE Definition / CWE-706

    CWE-706: Use of Incorrectly-Resolved Name or Reference

    The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

    Published:9 Sep 2008
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-664: Improper Control of a Resource Through its Lifetime

    CWE-99: Improper Control of Resource Identifiers ('Resource Injection')