Cyber Posture

CWE · MITRE source

CWE-424Improper Protection of Alternate Path

Abstraction: Class · CVEs in our corpus: 30

The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.

Last updated: 09 May 2026 03:25 UTC

NIST 800-53 r5 controls that address this weakness (1)AI

Control Title Family Why it addresses this CWE
AC-17Remote AccessACDocumenting requirements and authorizing remote access ensures proper protection of alternate paths.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2024-58136 KEV7.39.00.57532025-04-10
CVE-2025-488276.210.00.69392025-05-27
CVE-2025-488286.29.00.73682025-05-27
CVE-2024-34591.78.40.00082024-05-14
CVE-2023-529521.78.50.00072024-10-08
CVE-2025-689391.68.20.00022025-12-26
CVE-2024-34601.57.40.00052024-05-14
CVE-2019-189961.47.10.00142019-12-18
CVE-2022-17421.46.80.00052022-06-24
CVE-2023-06291.47.10.00072023-03-13
CVE-2023-51651.47.10.00012023-09-25
CVE-2023-202721.46.70.00302023-11-21
CVE-2021-37931.36.50.00322021-11-12
CVE-2023-461761.36.70.00022023-11-03
CVE-2024-83111.36.50.00042024-09-12
CVE-2025-491621.36.40.00112025-06-03
CVE-2025-491631.36.70.00092025-06-03
CVE-2025-62501.36.70.00032025-07-28
CVE-2024-39271.15.30.00512024-05-22
CVE-2026-42701.15.50.00012026-03-16
CVE-2026-49131.15.70.00112026-04-14
CVE-2025-466541.04.90.00162025-04-26
CVE-2025-466551.04.90.00152025-04-26
CVE-2019-189970.94.30.00402019-12-18
CVE-2022-287820.94.60.00022022-05-03