CWE-396: Declaration of Catch for Generic Exception
Filter
Catching overly broad exceptions promotes complex error handling code that is more likely to contain security vulnerabilities.
What the weakness is: CWE-396 at MITRE. OWASP Top 10: A10:2025 Mishandling of Exceptional Conditions
Ask an AI about CWE-396
Show the prompt
Explain CWE-396: Declaration of Catch for Generic Exception and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/396.html and https://cve.bz/cve/cwe/396?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.3CVE-2026-40149EPSS 0.2%
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when no auth_token is configured (the default). By adding danger…
- 6.5CVE-2026-27482EPSS 0.3%
Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. If the dashboard/agent is reachable (e.g…