threat
engine
.sh
Back
·
··:··
Home
/
CWE
/
Expected Behavior Violation
Weakness
Expected Behavior Violation
CWE-440 · Base · Draft
A feature, API, or function does not perform according to its specification.
△
Weakness Relationships
Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOf
CWE-684 · Incorrect Provision of Specified Functionality
Children (more specific)
ParentOf
CWE-1434 · Insecure Setting of Generative AI/ML Model Inference Parameters
⚠
CVEs With This Weakness
37
A sample of the 37 CVEs tagged with this weakness.
CVE
CVE-2026-41136
CVE
CVE-2026-35040
CVE
CVE-2026-3344
CVE
CVE-2025-8850
CVE
CVE-2025-6211
CVE
CVE-2025-52953
CVE
CVE-2025-46712
CVE
CVE-2025-40555
CVE
CVE-2025-32728
CVE
CVE-2025-3044
CVE
CVE-2025-27401
CVE
CVE-2025-27094
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin