KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Weakness / #22

CWE-269: Improper privilege management in CISA KEV

Improper Privilege Management

Catalog
2026.09.23
Rank
#22 of 185
MITRE
CWE-269 definition

Answer 18 KEV entries list CWE-269 (Improper privilege management) as of catalog 2026.09.23, 1% of the catalog and rank 22 of 185 weaknesses. The most affected vendor is Microsoft (9).

KEV entries
181% of catalog
Vendors
9affected
Ransomware: known
527.8%
First added
2021-11-03
Latest added
2026-09-11

VVendors

Vendors with CWE-269 KEV entries
VendorEntriesShare
Microsoft950%
Linux211.1%
ConnectWise15.6%
Oracle15.6%
Citrix15.6%
MinIO15.6%
Samsung15.6%
EyesOfNetwork15.6%
VMware15.6%

TAdditions by year

CWE-269 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 4; 2022: 5; 2023: 2; 2024: 2; 2025: 2; 2026: 3.02462021: 4 added420212022: 5 added520222023: 2 added220232024: 2 added220242025: 2 added220252026: 3 added (year to date)32026
CWE-269 KEV additions by year
YearAdded
20214
20225
20232
20242
20252
20263

PProducts

Products with CWE-269 KEV entries
ProductEntriesShare
Microsoft Windows738.9%
Linux Kernel211.1%
ConnectWise ScreenConnect15.6%
Oracle E-Business Suite15.6%
Citrix Session Recording15.6%
Microsoft Partner Center15.6%
MinIO MinIO15.6%
Samsung Mobile Devices15.6%

EAll entries

KEV entries listing CWE-269
CVEVendorProductAddedRansomware
CVE-2026-84869ConnectWiseScreenConnectUnknown
CVE-2026-46817OracleE-Business SuiteUnknown
CVE-2026-21533MicrosoftWindowsUnknown
CVE-2024-8068CitrixSession RecordingUnknown
CVE-2024-49035MicrosoftPartner CenterUnknown
CVE-2024-38014MicrosoftWindowsUnknown
CVE-2024-26169MicrosoftWindowsKnown
CVE-2023-28434MinIOMinIOUnknown
CVE-2019-1388MicrosoftWindowsKnown
CVE-2021-25337SamsungMobile DevicesUnknown
CVE-2014-3153LinuxKernelUnknown
CVE-2021-42287MicrosoftActive DirectoryKnown
CVE-2021-34484MicrosoftWindowsUnknown
CVE-2020-0787MicrosoftWindowsKnown
CVE-2019-13272LinuxKernelUnknown
CVE-2021-34527MicrosoftWindowsKnown
CVE-2020-8655EyesOfNetworkEyesOfNetworkUnknown
CVE-2020-3950VMwareMultiple ProductsUnknown

Cite this

18 CISA KEV entries list CWE-269 (Improper privilege management), 1% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-269/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API