CWE-657: Violation of Secure Design Principles

The product violates well-established principles for secure design.

18 tracked CVEs are classified under this weakness.

Highest-risk vulnerabilities

CVE-2026-39888 — PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
CVE-2024-26139 — OpenCTI Authenticated Privilege Escalation
CVE-2026-30792 — RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings
CVE-2024-57957 — Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vul
CVE-2025-24887 — OpenCTI bypass of protected attribute update
CVE-2026-48399 — Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
CVE-2025-54255 — Acrobat Reader | Violation of Secure Design Principles (CWE-657)

CVE-2026-48399 — Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
CVE-2026-39888 — PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
CVE-2026-30792 — RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings
CVE-2025-54255 — Acrobat Reader | Violation of Secure Design Principles (CWE-657)
CVE-2025-24887 — OpenCTI bypass of protected attribute update
CVE-2024-57957 — Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vul
CVE-2024-26139 — OpenCTI Authenticated Privilege Escalation

CWE-1192 — SOC
CWE-636 — Failing Open
CWE-637 — Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')
CWE-638 — Not Using Complete Mediation
CWE-653 — Improper Isolation or Compartmentalization
CWE-654 — Reliance on a Single Factor in a Security Decision
CWE-655 — Insufficient Psychological Acceptability
CWE-656 — Reliance on Security Through Obscurity
CWE-671 — Lack of Administrator Control over Security