NIST 800-53 r5 · Controls catalogue · Family CM
CM-14Signed Components
Prevent the installation of {{ insert: param, cm-14_prm_1 }} without verification that the component has been digitally signed using a certificate that is recognized and approved by the organization.
Last updated: 16 October 2026 14:24 UTC
Cumulative inbound coverage
How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.
Collective: partial · 1 mapping(s) from 1 framework(s): OWASP-Web 1 (partial)
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (3)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-347 | Improper Verification of Cryptographic Signature | 1,000+ | Requires verification of digital signatures using organization-approved certificates before installation, directly preventing improper verification of cryptographic signatures. |
CWE-494 | Download of Code Without Integrity Check | 200+ | Blocks installation of components lacking a valid signature, mitigating download or installation of code without integrity checks. |
CWE-353 | Missing Support for Integrity Check | 51 | Implements required signature-based integrity verification, addressing missing support for integrity checks on components. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2025-15556 KEV UPD | 8.3 | 7.5 | 0.0177 | good |
CVE-2026-3502 KEV | 8.2 | 7.8 | 0.0033 | good |
CVE-2024-27438 UPD | 7.5 | 9.8 | 0.0096 | good |
CVE-2026-27180 | 7.5 | 9.8 | 0.0126 | good |
CVE-2026-42249 UPD | 7.5 | 9.8 | 0.0099 | good |
CVE-2026-42248 UPD | 7.4 | 9.8 | 0.0072 | good |
CVE-2025-28236 UPD | 7.3 | 9.8 | 0.0040 | good |
CVE-2025-56513 UPD | 7.3 | 9.8 | 0.0044 | good |
CVE-2026-2999 UPD | 7.3 | 9.8 | 0.0055 | good |
CVE-2026-3000 UPD | 7.3 | 9.8 | 0.0055 | good |
CVE-2026-30612 | 7.3 | 9.8 | 0.0042 | good |
CVE-2023-41921 UPD | 7.2 | 9.8 | 0.0025 | good |
CVE-2026-34841 UPD | 7.2 | 9.8 | 0.0032 | good |
CVE-2026-22306 UPD | 7.2 | 10.0 | 0.0021 | good |
CVE-2025-40604 UPD | 7.1 | 9.8 | 0.0019 | good |
CVE-2025-53696 UPD | 7.0 | 9.3 | 0.0010 | good |
CVE-2026-45058 UPD | 7.0 | 9.4 | 0.0030 | good |
CVE-2026-9037 UPD | 7.0 | 9.3 | 0.0027 | good |
CVE-2026-50562 | 7.0 | 9.3 | 0.0021 | good |
CVE-2026-66398 | 7.0 | 9.4 | 0.0034 | good |
CVE-2026-48046 UPD | 7.0 | 9.3 | 0.0036 | good |
CVE-2026-57910 UPD | 7.0 | 9.3 | 0.0024 | good |
CVE-2024-28878 UPD | 6.6 | 9.6 | 0.0027 | good |
CVE-2023-39474 UPD | 6.6 | 8.8 | 0.0062 | good |
CVE-2025-27593 UPD | 6.6 | 9.3 | 0.0041 | good |