CWE · MITRE source
CWE-606Unchecked Input for Loop Condition
The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
Last updated: 15 October 2026 07:26 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
Detect
Catch it (CSF Detect / Respond)
—
Harden
Shrink the surface (DISA STIG)
—
Validate
Prove the fix (OWASP ASVS)
V17.3.2
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2024-43499 UPD | 6.3 | 7.5 | 0.0260 | 2024-11-12 |
CVE-2026-20301 UPD | 6.3 | 8.6 | 0.0057 | 2026-08-05 |
CVE-2026-1519 UPD | 6.2 | 7.5 | 0.0160 | 2026-03-25 |
CVE-2026-62901 | 6.1 | 7.5 | 0.0123 | 2026-08-11 |
CVE-2022-3252 UPD | 6.0 | 7.5 | 0.0083 | 2022-09-21 |
CVE-2026-33891 UPD | 6.0 | 7.5 | 0.0090 | 2026-03-27 |
CVE-2026-33814 UPD | 6.0 | 7.5 | 0.0078 | 2026-05-07 |
CVE-2026-39820 UPD | 6.0 | 7.5 | 0.0078 | 2026-05-07 |
CVE-2026-42561 UPD | 6.0 | 7.5 | 0.0085 | 2026-05-13 |
CVE-2024-34486 UPD | 5.9 | 7.5 | 0.0065 | 2024-05-05 |
CVE-2025-65518 UPD | 5.9 | 7.5 | 0.0061 | 2026-01-08 |
CVE-2026-44289 UPD | 5.9 | 7.5 | 0.0068 | 2026-05-13 |
CVE-2026-10143 UPD | 5.9 | 7.5 | 0.0052 | 2026-06-10 |
CVE-2025-43801 UPD | 5.8 | 7.5 | 0.0040 | 2025-09-16 |
CVE-2026-27689 | 5.7 | 7.7 | 0.0055 | 2026-03-10 |
CVE-2026-23689 UPD | 5.6 | 7.7 | 0.0041 | 2026-02-10 |
CVE-2024-13931 UPD | 5.4 | 7.2 | 0.0042 | 2025-05-22 |
CVE-2023-3446 UPD | 5.2 | 5.3 | 0.0653 | 2023-07-19 |
CVE-2026-66276 | 5.2 | 6.5 | 0.0065 | 2026-08-05 |
CVE-2026-67554 | 5.2 | 6.5 | 0.0065 | 2026-08-05 |
CVE-2026-68077 | 5.2 | 6.5 | 0.0065 | 2026-08-05 |
CVE-2023-5678 UPD | 5.1 | 5.3 | 0.0446 | 2023-11-06 |
CVE-2023-6237 UPD | 5.1 | 5.9 | 0.0230 | 2024-04-25 |
CVE-2026-27145 UPD | 5.1 | 6.5 | 0.0059 | 2026-06-02 |
CVE-2025-42930 UPD | 5.0 | 6.5 | 0.0032 | 2025-09-09 |