What is CWE-358?
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
CWE-358 is a base-level weakness in MITRE’s Common Weakness Enumeration. Applicable platforms: Language: Not Language-Specific.
Source: MITRE CWE (CWE-358 definition, reproduced verbatim). Counts and linkage below are Threadlinqs data.
Consequences
- Access Control — Bypass Protection Mechanism
Source: MITRE CWE, common consequences.
How CWE-358 is exploited in the wild
Threadlinqs maps 3 CVEs to CWE-358, published between 2024-04-30 and 2026-07-01. None of them is in the CISA KEV catalog yet. By CVSS v3 severity the set splits into 1 high, 1 medium. The highest EPSS score in the set is 0.6% (CVE-2024-2617), the modelled probability of exploitation in the next 30 days. 6 tracked threats reference CWE-358 directly or through a CVE it covers; the most recent is “Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices (SSA-864900) — Including Actively Exploited FortiCloud SSO Bypass (CVE-2025-59718/-59719) and FortiOS Heap Overflow (CVE-2025-25249)” (2026-09-13). Affected products concentrate in Cloudflare (1), Fortinet (1), Hitachi Energy (1).
Vulnerabilities (CVEs)
All 3 CVEs mapped to CWE-358, CISA KEV first, then by CVSS score.
- CVE-2024-2617 — CVSS 7.2 high · EPSS 0.6% · published 2024-04-30
- CVE-2024-55599 — CVSS 4.9 medium · EPSS 0.3% · published 2025-07-08
- CVE-2026-14440 — EPSS 0.0% · published 2026-07-01
Affected vendors
- Cloudflare — 1 CVE
- Fortinet — 1 CVE
- Hitachi Energy — 1 CVE
Threat activity
6 tracked threats cite CWE-358:
- Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices (SSA-864900) — Including Actively Exploited FortiCloud SSO Bypass (CVE-2025-59718/-59719) and FortiOS Heap Overflow (CVE-2025-25249)CRITICAL
- Kaspersky ICS-CERT Q1 2026 Review: Sandworm/Static Tundra Wiper Hits Polish Energy Grid, Suspected Iran Intrusion at NCBJ Nuclear Centre, Void Manticore's Handala Persona Wipes 200,000 Stryker Devices, DragonForce Ransomware Disrupts Hazeldenes PoultryHIGH
- MyFlaw: Cross-Platform RCE in Opera and Opera GX Browsers via the Built-in 'Opera Touch Background' Extension (My Flow Feature)HIGH
- CIFSwitch — Linux Kernel CIFS/SPNEGO Key Validation Logic Flaw Enables Unprivileged Local Root via cifs.upcall Namespace Hijack (Public PoC, CVE Pending)HIGH
- Chrome V8 and Skia Zero-Days Under Active Exploitation (CVE-2026-3910, CVE-2026-3909)CRITICAL
- Static Tundra (Dragonfly/Energetic Bear) ICS Attacks on Polish Energy InfrastructureCRITICAL