CWE-696Incorrect Behavior Order

Abstraction: Class · CVEs in our corpus: 40

The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways that may produce resultant weaknesses.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 1 mapping(s) from 1 framework(s): CAPEC 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-11 Developer Testing and Evaluation
SA-8 Security and Privacy Engineering Principles
SA-15 Development Process, Standards, and Tools

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2026-44108`	7.3	9.8	0.0046	2026-07-30
`CVE-2021-22569`	6.2	7.5	0.0167	2022-01-10
`CVE-2026-40583`	6.2	8.2	0.0038	2026-04-21
`CVE-2021-31379`	6.1	7.5	0.0134	2021-10-19
`CVE-2026-14169`	6.0	8.1	0.0029	2026-07-28
`CVE-2023-33224`	5.9	7.2	0.0279	2023-07-26
`CVE-2025-31485`	5.9	7.5	0.0057	2025-04-03
`CVE-2026-45033`	5.8	7.8	0.0035	2026-05-13
`CVE-2026-35637`	5.6	7.3	0.0025	2026-04-09
`CVE-2025-0150`	5.5	7.1	0.0047	2025-03-11
`CVE-2026-35627`	5.2	6.5	0.0045	2026-04-09
`CVE-2026-35652`	5.2	6.5	0.0042	2026-04-10
`CVE-2024-24853`	5.0	7.2	0.0023	2024-08-14
`CVE-2026-35636`	5.0	6.5	0.0026	2026-04-09
`CVE-2026-68930`	4.9	6.5	0.0021	2026-08-03
`CVE-2023-44386`	4.5	5.3	0.0060	2023-10-05
`CVE-2024-30410`	4.5	5.8	0.0036	2024-04-12
`CVE-2024-30389`	4.5	5.8	0.0036	2024-04-12
`CVE-2026-35640`	4.5	5.3	0.0044	2026-04-09
`CVE-2024-35229`	4.4	5.3	0.0040	2024-05-27
`CVE-2025-55114`	4.4	5.3	0.0039	2025-09-16
`CVE-2025-9904`	4.4	5.3	0.0036	2025-09-29
`CVE-2026-43002`	4.4	5.3	0.0037	2026-05-05
`CVE-2026-67217`	4.3	5.3	0.0025	2026-07-29
`CVE-2021-47688`	4.2	5.7	0.0016	2025-06-23