CWEweakness

CWE-693 Protection Mechanism Failure

Official page ↗
Abstraction
Pillar
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Common consequences

• Access Control: Bypass Protection Mechanism

Related

Attack pattern · CAPEC (17)

  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs attack pattern
  • CAPEC-107 Cross Site Tracing attack pattern
  • CAPEC-127 Directory Indexing attack pattern
  • CAPEC-17 Using Malicious Files attack pattern
  • CAPEC-20 Encryption Brute Forcing attack pattern
  • CAPEC-22 Exploiting Trust in Client attack pattern
  • CAPEC-237 Escaping a Sandbox by Calling Code in Another Language attack pattern
  • CAPEC-36 Using Unpublished Interfaces or Functionality attack pattern
  • CAPEC-477 Signature Spoofing by Mixing Signed and Unsigned Content attack pattern
  • CAPEC-480 Escaping Virtualization attack pattern
  • CAPEC-51 Poison Web Service Registry attack pattern
  • CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data attack pattern
  • CAPEC-59 Session Credential Falsification through Prediction attack pattern
  • CAPEC-65 Sniff Application Code attack pattern
  • CAPEC-668 Key Negotiation of Bluetooth Attack (KNOB) attack pattern
  • CAPEC-74 Manipulating State attack pattern
  • CAPEC-87 Forceful Browsing attack pattern

Referenced by CAPEC · weakness (17)

  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs attack pattern
  • CAPEC-107 Cross Site Tracing attack pattern
  • CAPEC-127 Directory Indexing attack pattern
  • CAPEC-17 Using Malicious Files attack pattern
  • CAPEC-20 Encryption Brute Forcing attack pattern
  • CAPEC-22 Exploiting Trust in Client attack pattern
  • CAPEC-237 Escaping a Sandbox by Calling Code in Another Language attack pattern
  • CAPEC-36 Using Unpublished Interfaces or Functionality attack pattern
  • CAPEC-477 Signature Spoofing by Mixing Signed and Unsigned Content attack pattern
  • CAPEC-480 Escaping Virtualization attack pattern
  • CAPEC-51 Poison Web Service Registry attack pattern
  • CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data attack pattern
  • CAPEC-59 Session Credential Falsification through Prediction attack pattern
  • CAPEC-65 Sniff Application Code attack pattern
  • CAPEC-668 Key Negotiation of Bluetooth Attack (KNOB) attack pattern
  • CAPEC-74 Manipulating State attack pattern
  • CAPEC-87 Forceful Browsing attack pattern

Referenced by CVE · weakness (921)

  • CVE-2026-110181 PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. vulnerability
  • CVE-2026-110182 PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. vulnerability
  • CVE-2026-87100 Protection mechanism failure due to missing binary hardening in Linux executables. vulnerability
  • CVE-2026-87878 Linux binaries have executable stack attribute enabled. vulnerability
  • CVE-2026-65327 A logic issue was addressed with improved checks. vulnerability
  • CVE-2026-116145 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass… vulnerability
  • CVE-2026-111965 The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths,… vulnerability
  • CVE-2026-115480 baserCMS is a website development framework. vulnerability
  • CVE-2026-56838 PraisonAI is a multi-agent teams system. vulnerability
  • CVE-2026-57144 PraisonAI is a multi-agent teams system. vulnerability
  • CVE-2026-114614 Authlib is a Python library which builds OAuth and OpenID Connect servers. vulnerability
  • CVE-2026-114139 Sentry-Javascript is an official Sentry SDKs for JavaScript. vulnerability
  • CVE-2026-76301 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security… vulnerability
  • CVE-2026-76528 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security… vulnerability
  • CVE-2026-113609 Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass… vulnerability
  • CVE-2026-113730 OGNL is an Object Graph Navigation Library for Java. vulnerability
  • CVE-2026-91402 Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). vulnerability
  • CVE-2026-112077 A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. vulnerability
  • CVE-2026-112361 A vulnerability has been found in Dolibarr up to 23.0.2. vulnerability
  • CVE-2026-77474 destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. vulnerability
  • CVE-2026-104024 Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas,… vulnerability
  • CVE-2026-104025 Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows… vulnerability
  • CVE-2026-110689 A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. vulnerability
  • CVE-2026-110866 Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user… vulnerability
  • CVE-2026-66874 For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow… vulnerability
  • CVE-2026-101899 Axios is a promise-based HTTP client for the browser and Node.js. vulnerability
  • CVE-2026-102734 asteval is a Python expression evaluator designed for restricted execution. vulnerability
  • CVE-2026-109734 Mitigation bypass in the DOM: Security component. vulnerability
  • CVE-2026-109737 Mitigation bypass in the Enterprise Policies component. vulnerability
  • CVE-2026-109746 Mitigation bypass in the DOM: Security component. vulnerability
Show all 921 ›

Referenced by CWE · child of (25)

  • CWE-1039 Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism weakness
  • CWE-1248 Semiconductor Defects in Hardware Logic with Security-Sensitive Implications weakness
  • CWE-1253 Incorrect Selection of Fuse Values weakness
  • CWE-1269 Product Released in Non-Release Configuration weakness
  • CWE-1278 Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques weakness
  • CWE-1291 Public Key Re-Use for Signing both Debug and Production Code weakness
  • CWE-1318 Missing Support for Security Features in On-chip Fabrics or Buses weakness
  • CWE-1319 Improper Protection against Electromagnetic Fault Injection (EM-FI) weakness
  • CWE-1326 Missing Immutable Root of Trust in Hardware weakness
  • CWE-184 Incomplete List of Disallowed Inputs weakness
  • CWE-311 Missing Encryption of Sensitive Data weakness
  • CWE-326 Inadequate Encryption Strength weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness
  • CWE-330 Use of Insufficiently Random Values weakness
  • CWE-345 Insufficient Verification of Data Authenticity weakness
  • CWE-357 Insufficient UI Warning of Dangerous Operations weakness
  • CWE-358 Improperly Implemented Security Check for Standard weakness
  • CWE-424 Improper Protection of Alternate Path weakness
  • CWE-602 Client-Side Enforcement of Server-Side Security weakness
  • CWE-653 Improper Isolation or Compartmentalization weakness
  • CWE-654 Reliance on a Single Factor in a Security Decision weakness
  • CWE-655 Insufficient Psychological Acceptability weakness
  • CWE-656 Reliance on Security Through Obscurity weakness
  • CWE-757 Selection of Less-Secure Algorithm During Negotiation weakness
  • CWE-807 Reliance on Untrusted Inputs in a Security Decision weakness

Referenced by CWE · has member (1)

  • CWE-1000 Complete Weakness Hierarchy view

Referenced by OWASP · mapped cwe (1)