Weaknesses of type CWE-697

103 results

Comparação incorreta

A fraqueza ocorre quando o código realiza comparações lógicas de forma imprecisa — usando operadores errados, comparando tipos incompatíveis ou ignorando casos especiais — resultando em decisões de segurança incorretas. Um atacante pode contornar validações ou controles de acesso explorando o desvio na lógica condicional.

Example

Um código valida senha comparando strings com '==' em vez de usar função de hash segura; ou verifica se um ID de usuário é válido com 'if (id > 0)' quando deveria validar contra uma lista branca específica. Em ambos os casos, a comparação rasa permite bypass de segurança.

How to mitigate

Use sempre funções apropriadas para cada tipo de comparação (ex: hash seguro para senhas, igualdade de tipo e valor com operadores estritos); implemente validação contra listas brancas explícitas; adicione testes unitários que cobram casos extremos e valores inesperados; revise a lógica condicional em controles de segurança durante code review.

CVE-2026-56101MEDIUMOpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoSEPSS 0.4%CVE-2023-25673HIGHTensorFlow has Floating Point Exception in TensorListSplit with XLA EPSS 0.4%CVE-2023-25675HIGHTensorFlow has Segfault in Bincount with XLAEPSS 0.4%CVE-2023-27579HIGHTensorFlow has Floating Point Exception in TFLite in conv kernelEPSS 0.4%CVE-2023-25669HIGHTensorFlow has Floating Point Exception in AvgPoolGrad with XLAEPSS 0.4%CVE-2023-25666HIGHTensorFlow has Floating Point Exception in AudioSpectrogram EPSS 0.4%CVE-2026-35040MEDIUMfast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)EPSS 0.4%CVE-2026-14617LOWNousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivityEPSS 0.4%CVE-2025-47416MEDIUMConsoleFindCommandMatchListEPSS 0.4%CVE-2026-92087HIGH@fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed authEPSS 0.4%CVE-2026-49846HIGHlibks has path traversal in kws HTTP parser via URI segment overflowEPSS 0.3%CVE-2026-91997MEDIUMevolution-api through 2.3.7 Prometheus Metrics IP Allowlist BypassEPSS 0.3%CVE-2026-18664HIGHWrong interpretation of ACL rangesEPSS 0.3%CVE-2026-61795MEDIUMCapsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validationEPSS 0.3%CVE-2026-14686MEDIUMHdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparisonEPSS 0.3%CVE-2026-65903MEDIUMDOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGSEPSS 0.3%CVE-2026-73258MEDIUMMongoose: Multipart boundary/header scan logic error in mg_http_next_multipartEPSS 0.3%CVE-2026-45569HIGHRoxy-WI: Path-traversal patch in commit d4d10006 is a no-op (tuple-membership bug)EPSS 0.3%CVE-2026-20333HIGHCisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison VulnerabilitiesEPSS 0.3%CVE-2026-71855MEDIUMSuricata flow: IPv4/IPv6 hash collision can reuse wrong flow stateEPSS 0.3%