{
  "node_id": "owasp-top-10-2025-a10-mishandling-of-exceptional-conditions",
  "title": "A10:2025 Mishandling of Exceptional Conditions",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-07-17",
  "bluf": "OWASP Top 10:2025 A10:2025 Mishandling of Exceptional Conditions. Mishandling exceptional conditions in software happens when programs fail to prevent, detect, and respond to unusual and unpredictable situations, which leads to crashes, unexpected behavior, and sometimes vulnerabilities. This category sits within the OWASP Top 10:2025 (the 2025 edition, finalized January 2026), the canonical industry list of the ten most critical web application security risks. Organizations building web applications should treat each of the ten categories as both a design constraint and a continuous-monitoring obligation, with policies, automated testing, and incident response procedures defined per category. Mapped weaknesses: CWE-209, CWE-248, CWE-252, CWE-390, CWE-476, CWE-636, CWE-703, CWE-754.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "owasp-asvs-l1",
    "owasp-asvs-l2",
    "nist-sp-800-53-r5",
    "iso-27001-2022"
  ],
  "primary_citations_count": 10
}