Cyber Resilience

CWE · MITRE source

CWE-349Acceptance of Extraneous Untrusted Data With Trusted Data

Abstraction: Base · CVEs in our corpus: 40

The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

Last updated: 20 August 2026 20:22 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 1 mapping(s) from 1 framework(s): STIG oracle linux 8 1 (mostly)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.DS-01
  • PR.DS-02
  • PR.PS-06
  • AC-4 Information Flow Enforcement
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)
  • 5 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V1.2.2
  • V10.4.7
  • V3.7.3
  • V5.3.1

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2019-9535 7.79.80.02482019-10-09
CVE-2026-411207.39.80.00452026-06-25
CVE-2026-42960 7.110.00.00252026-05-20
CVE-2018-1131 6.88.80.01252018-05-15
CVE-2026-45602 6.89.10.00372026-06-09
CVE-2026-321626.78.40.02032026-04-14
CVE-2024-25638 6.38.90.00392024-07-22
CVE-2025-40778 6.38.60.00662025-10-22
CVE-2026-502526.39.30.00142026-07-22
CVE-2021-21374 6.18.10.01042021-03-26
CVE-2025-40776 6.08.60.00202025-07-16
CVE-2020-8023 5.97.70.00412020-09-01
CVE-2025-27415 5.87.50.00382025-03-19
CVE-2025-29816 5.77.50.00442025-04-08
CVE-2025-29842 5.77.50.00422025-05-13
CVE-2026-356415.67.80.00142026-04-10
CVE-2023-44317 5.47.20.00382023-11-14
CVE-2024-41924 5.37.20.00272024-07-30
CVE-2025-48804 5.36.80.00572025-07-08
CVE-2026-336125.27.50.00112026-06-25
CVE-2023-3749 5.17.10.00122023-08-03
CVE-2024-42483 5.06.50.00302024-09-12
CVE-2024-53848 5.07.10.00142024-11-29
CVE-2023-51655 4.86.30.00332023-12-21
CVE-2020-10751 4.76.10.00352020-05-26