CWE-637: Unnecessary Complexity

The product uses a more complex mechanism than necessary, which could lead to resultant weaknesses when the mechanism is not correctly understood, modeled, configured, implemented, or used.

Also known as Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism').

A kind of CWE-657 Violation of Secure Design Principles.

From the CWE List. © The MITRE Corporation.

Newest

• krajowa izba rozliczeniowa szafir sdk Improper Certificate Verification in Szafir SDK CVE-2026-9058 9.3 CriticalMay 25, 2026