Cyber Resilience

CWE · MITRE source

CWE-606Unchecked Input for Loop Condition

Abstraction: Base · CVEs in our corpus: 40

The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.

Last updated: 21 August 2026 20:21 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SI-10 Information Input Validation
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)
  • V17.3.2
  • V4.3.1

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2024-43499 6.37.50.02602024-11-12
CVE-2026-1519 6.27.50.01602026-03-25
CVE-2026-203016.18.60.00332026-08-05
CVE-2026-629016.17.50.01062026-08-11
CVE-2022-3252 6.07.50.00752022-09-21
CVE-2026-33814 6.07.50.00782026-05-07
CVE-2026-39820 6.07.50.00782026-05-07
CVE-2026-42561 6.07.50.00742026-05-13
CVE-2024-34486 5.97.50.00652024-05-05
CVE-2025-65518 5.97.50.00572026-01-08
CVE-2026-33891 5.97.50.00602026-03-27
CVE-2026-44289 5.97.50.00582026-05-13
CVE-2026-10143 5.97.50.00522026-06-10
CVE-2025-43801 5.87.50.00402025-09-16
CVE-2026-23689 5.67.70.00352026-02-10
CVE-2026-276895.67.70.00372026-03-10
CVE-2024-13931 5.47.20.00392025-05-22
CVE-2023-3446 5.25.30.06532023-07-19
CVE-2023-5678 5.15.30.04462023-11-06
CVE-2023-6237 5.15.90.02302024-04-25
CVE-2026-27145 5.16.50.00592026-06-02
CVE-2026-662765.16.50.00422026-08-05
CVE-2026-675545.16.50.00412026-08-05
CVE-2026-680775.16.50.00422026-08-05
CVE-2025-42930 5.06.50.00322025-09-09