CWE-1025Comparison Using Wrong Factors

Abstraction: Base · CVEs in our corpus: 13

The code performs a comparison between two entities, but the comparison examines the wrong factors or characteristics of the entities, which can lead to incorrect results and resultant weaknesses.

Last updated: 20 August 2026 13:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

SA-11 Developer Testing and Evaluation
PR.PS-06
SA-15 Development Process, Standards, and Tools

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2025-25306`	6.4	9.3	0.0017	2025-03-10
`CVE-2026-9800`	6.1	8.1	0.0036	2026-06-25
`CVE-2026-40880`	6.0	8.1	0.0026	2026-04-21
`CVE-2026-75840`	5.8	7.5	0.0031	2026-08-18
`CVE-2025-32464`	5.1	6.8	0.0072	2025-04-09
`CVE-2026-48860`	4.9	6.5	0.0019	2026-06-10
`CVE-2026-40227`	4.7	6.2	0.0020	2026-04-10
`CVE-2024-20342`	4.6	5.8	0.0053	2024-10-23
`CVE-2026-21691`	4.3	5.4	0.0025	2026-01-07
`CVE-2025-2887`	3.7	4.5	0.0031	2025-03-27
`CVE-2025-2888`	3.7	4.5	0.0031	2025-03-27
`CVE-2025-27839`	2.7	3.2	0.0035	2025-03-08