NIST 800-53 r5 · Controls catalogue · Family CP
CP-12Safe Mode
When {{ insert: param, cp-12_odp.02 }} are detected, enter a safe mode of operation with {{ insert: param, cp-12_odp.01 }}.
Last updated: 21 August 2026 14:15 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (4)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-754 | Improper Check for Unusual or Exceptional Conditions | 700+ | Implements detection of unusual or exceptional conditions followed by safe mode entry, reducing the window for exploitation of unchecked conditions. |
CWE-755 | Improper Handling of Exceptional Conditions | 600+ | Supplies a concrete handling action (safe mode) for exceptional conditions, mitigating risks from improper or absent handling that could allow continued attacks. |
CWE-703 | Improper Check or Handling of Exceptional Conditions | 100+ | Provides a defined response to detected conditions by restricting operation, ensuring exceptional conditions are handled rather than ignored or mishandled. |
CWE-636 | Not Failing Securely ('Failing Open') | 46 | Entering safe mode when conditions are detected prevents failing open and continuing normal operation in a potentially exploitable state. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2026-2757 UPD | 7.3 | 9.8 | 0.0049 | good |
CVE-2026-2759 UPD | 7.3 | 9.8 | 0.0040 | good |
CVE-2026-2760 UPD | 7.3 | 10.0 | 0.0040 | good |
CVE-2025-52557 UPD | 5.5 | 8.6 | 0.0037 | good |
CVE-2024-39355 UPD | 4.7 | 6.5 | 0.0024 | good |
CVE-2024-43532 UPD | 7.5 | 8.8 | 0.1197 | good |
CVE-2024-3729 UPD | 7.4 | 9.8 | 0.0081 | good |
CVE-2026-22034 UPD | 7.4 | 9.8 | 0.0067 | good |
CVE-2026-40525 UPD | 6.9 | 9.1 | 0.0057 | good |
CVE-2026-68746 | 6.6 | 8.8 | 0.0045 | good |
CVE-2026-44094 | 6.4 | 8.6 | 0.0026 | good |
CVE-2024-8185 UPD | 5.9 | 7.5 | 0.0048 | good |
CVE-2026-69306 | 5.9 | 8.2 | 0.0040 | good |
CVE-2026-35205 UPD | 5.7 | 7.8 | 0.0022 | good |
CVE-2026-42423 | 5.6 | 7.5 | 0.0032 | good |
CVE-2025-54870 UPD | 5.5 | 8.7 | 0.0020 | good |
CVE-2026-53712 | 5.5 | 8.2 | 0.0017 | good |
CVE-2026-16584 | 5.1 | 7.0 | 0.0016 | partial |
CVE-2026-41334 | 5.0 | 6.5 | 0.0032 | good |
CVE-2024-2660 UPD | 4.8 | 6.4 | 0.0030 | good |
CVE-2026-54291 | 4.5 | 5.9 | 0.0020 | good |
CVE-2026-40249 | 4.4 | 5.3 | 0.0032 | good |
CVE-2026-46482 | 4.4 | 5.3 | 0.0033 | good |
CVE-2026-27448 | 4.3 | 5.3 | 0.0024 | good |
CVE-2026-53852 | 4.2 | 5.4 | 0.0021 | good |