Cyber Resilience

CWE · MITRE source

CWE-140Improper Neutralization of Delimiters

Abstraction: Base · CVEs in our corpus: 20

The product does not neutralize or incorrectly neutralizes delimiters.

Last updated: 20 August 2026 20:22 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 1 mapping(s) from 1 framework(s): CAPEC 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SA-11 Developer Testing and Evaluation
  • SI-10 Information Input Validation
  • SA-8 Security and Privacy Engineering Principles
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2024-38865 6.78.80.00792025-04-10
CVE-2023-31208 6.58.30.00972023-05-17
CVE-2025-32918 6.58.80.00342025-07-04
CVE-2026-47162 6.48.80.00252026-06-11
CVE-2023-6156 6.07.60.00862023-11-22
CVE-2023-6157 6.07.60.00882023-11-22
CVE-2026-6322 5.97.50.00472026-05-05
CVE-2024-38866 5.87.50.00352025-05-27
CVE-2023-38488 5.77.10.00922023-07-27
CVE-2025-47779 5.77.70.00482025-05-22
CVE-2026-33456 5.67.60.00202026-04-10
CVE-2024-6542 5.26.50.00472024-07-22
CVE-2025-48879 4.96.50.00222025-06-10
CVE-2026-33455 4.86.30.00182026-04-10
CVE-2026-33457 4.86.30.00182026-04-10
CVE-2026-216914.35.40.00252026-01-07
CVE-2024-42482 4.14.80.00822024-08-12
CVE-2025-52989 3.85.10.00122025-07-11
CVE-2024-423923.24.00.00212024-11-18
CVE-2024-423853.04.00.00092024-11-18