CWE-484: Omitted Break Statement in Switch
Filter
The product omits a break statement within a switch or similar construct, causing code associated with multiple conditions to execute. This can cause problems when the programmer only intended to execute code associated with one condition.
What the weakness is: CWE-484 at MITRE. OWASP Top 10: A10:2025 Mishandling of Exceptional Conditions
Ask an AI about CWE-484
Show the prompt
Explain CWE-484: Omitted Break Statement in Switch and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/484.html and https://cve.bz/cve/cwe/484?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 3.7CVE-2026-44075EPSS 0.3%
A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, resulting in unintended session option handling that may allow a remote at…