Base weakness
Incomplete
CWE-178: Improper Handling of Case Sensitivity
The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.
Last updated
36
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
Improperly handled case sensitive data can lead to several possible consequences, including: case-insensitive passwords reducing the size of the key space, making brute force attacks easier bypassing filters or access controls using alternate names multiple interpretation errors using alternate names.
Real-world CVEs
36 recorded CVEs are caused by CWE-178 (Improper Handling of Case Sensitivity). The highest-severity and most recent are shown first. 15 new CWE-178 CVEs have been recorded so far in 2026 (7 in 2025).