NIST 800-53 r5 · Controls catalogue · Family CP
CP-12Safe Mode
When {{ insert: param, cp-12_odp.02 }} are detected, enter a safe mode of operation with {{ insert: param, cp-12_odp.01 }}.
Last updated: 14 October 2026 22:30 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (4)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-754 | Improper Check for Unusual or Exceptional Conditions | 800+ | Implements detection of unusual or exceptional conditions followed by safe mode entry, reducing the window for exploitation of unchecked conditions. |
CWE-755 | Improper Handling of Exceptional Conditions | 700+ | Supplies a concrete handling action (safe mode) for exceptional conditions, mitigating risks from improper or absent handling that could allow continued attacks. |
CWE-703 | Improper Check or Handling of Exceptional Conditions | 100+ | Provides a defined response to detected conditions by restricting operation, ensuring exceptional conditions are handled rather than ignored or mishandled. |
CWE-636 | Not Failing Securely ('Failing Open') | 70 | Entering safe mode when conditions are detected prevents failing open and continuing normal operation in a potentially exploitable state. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2026-53459 UPD | 7.0 | 9.3 | 0.0076 | partial |
CVE-2026-103510 | 7.0 | 9.5 | 0.0035 | partial |
CVE-2026-95848 | 6.8 | 9.1 | 0.0042 | partial |
CVE-2026-92591 | 4.7 | 5.9 | 0.0041 | partial |
CVE-2026-88831 | 4.3 | 5.3 | 0.0024 | partial |
CVE-2026-100304 | 4.2 | 5.3 | 0.0035 | partial |
CVE-2026-100860 | 4.1 | 5.5 | 0.0011 | partial |
CVE-2026-2760 UPD | 7.5 | 10.0 | 0.0063 | good |
CVE-2026-2757 UPD | 7.4 | 9.8 | 0.0063 | good |
CVE-2026-2759 UPD | 7.4 | 9.8 | 0.0063 | good |
CVE-2026-77866 | 7.0 | 9.0 | 0.0048 | partial |
CVE-2026-95676 UPD | 5.8 | 7.5 | 0.0037 | partial |
CVE-2025-52557 UPD | 5.5 | 8.6 | 0.0042 | good |
CVE-2024-39355 UPD | 4.7 | 6.5 | 0.0024 | good |
CVE-2024-43532 UPD | 7.5 | 8.8 | 0.1197 | good |
CVE-2024-3729 UPD | 7.4 | 9.8 | 0.0081 | good |
CVE-2026-22034 UPD | 7.4 | 9.8 | 0.0071 | good |
CVE-2026-40525 UPD | 7.0 | 9.1 | 0.0076 | good |
CVE-2026-68746 | 6.7 | 8.8 | 0.0080 | good |
CVE-2026-44094 | 6.5 | 8.6 | 0.0045 | good |
CVE-2026-18329 | 6.2 | 8.2 | 0.0038 | good |
CVE-2024-8185 UPD | 5.9 | 7.5 | 0.0048 | good |
CVE-2026-69306 UPD | 5.9 | 8.2 | 0.0054 | good |
CVE-2026-81379 | 5.9 | 8.2 | 0.0054 | good |
CVE-2026-42423 | 5.8 | 7.5 | 0.0058 | good |