What CVEs are caused by CWE-1188?

149 recorded CVEs are attributed to CWE-1188, including CVE-2023-27524, CVE-2022-24706, CVE-2023-6448. 4 are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

What are the consequences of CWE-1188?

Exploiting CWE-1188 can lead to: Varies by Context.

Is CWE-1188 actively exploited?

Yes. 4 CWE-1188 vulnerabilities are in CISA's KEV catalog of actively exploited flaws, out of 149 recorded CVEs.

Base weakness

Incomplete

CWE-1188: Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.

Last updated May 1, 2026

149

Recorded CVEs

With this primary weakness

KEVs

In the CISA KEV catalog

Not rated

Likelihood of exploit

Per MITRE

Base

Abstraction

MITRE classification

Overview

CWE-1188 (Initialization of a Resource with an Insecure Default) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.

Real-world CVEs

149 recorded CVEs are caused by CWE-1188 (Initialization of a Resource with an Insecure Default), including 4 in CISA's KEV (Known Exploited Vulnerabilities) catalog. KEVs are shown first. 53 new CWE-1188 CVEs have been recorded so far in 2026 (40 in 2025).

Showing 12 of 149 recorded CWE-1188 CVEs. Track new ones as they are published and get AI-written analysis and fixes.

Monitor CWE-1188 vulnerabilities

Common consequences

What can happen when CWE-1188 is exploited.

Varies by Context

Affects: Other

The impact of insecure defaults varies widely depending on the functionality that the product controls.

How it happens

When it is introduced

Typically introduced during these phases of the software lifecycle.

Implementation

System Configuration

How to detect it

Automated Static Analysis

Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)

Code examples

Illustrative examples from MITRE showing how the weakness appears in code.

This code attempts to login a user using credentials from a POST request:

Safe example

php

...
$user = $_POST['user'];

Illustrative examples

Real CVEs that MITRE cites as examples of this weakness.

CVE-2022-36349 — insecure default variable initialization in BIOS firmware for a hardware board allows DoS
CVE-2022-42467 — A generic database browser interface has a default mode that exposes a web server to the network, allowing queries to the database.

Attack patterns

CAPEC attack patterns that exploit this weakness.

CAPEC-665: Exploitation of Thunderbolt Protection Flaws

Frequently asked questions

Common questions about CWE-1188.

What is CWE-1188?: The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.
What CVEs are caused by CWE-1188?: 149 recorded CVEs are attributed to CWE-1188, including CVE-2023-27524, CVE-2022-24706, CVE-2023-6448. 4 are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
How is CWE-1188 detected?: Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)
What are the consequences of CWE-1188?: Exploiting CWE-1188 can lead to: Varies by Context.
Is CWE-1188 actively exploited?: Yes. 4 CWE-1188 vulnerabilities are in CISA's KEV catalog of actively exploited flaws, out of 149 recorded CVEs.

References

Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.

Stay ahead of CWE-1188

Get alerted the moment a new CWE-1188 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.

Start free See pricing