Weakness / #67
CWE-285: Improper authorization in CISA KEV
Improper Authorization
Answer 3 KEV entries list CWE-285 (Improper authorization) as of catalog 2026.09.23, 0.2% of the catalog and rank 67 of 185 weaknesses. The most affected vendor is QNAP (1).
- KEV entries
- 30.2% of catalog
- Vendors
- 3affected
- Ransomware: known
- 3100%
- First added
- 2021-11-03
- Latest added
- 2022-03-31
VVendors
TAdditions by year
| Year | Added |
|---|---|
| 2021 | 1 |
| 2022 | 2 |
| 2023 | 0 |
| 2024 | 0 |
| 2025 | 0 |
| 2026 | 0 |
PProducts
| Product | Entries | Share |
|---|---|---|
| QNAP Network Attached Storage (NAS) | 1 | 33.3% |
| Fortinet FortiOS and FortiProxy | 1 | 33.3% |
| Microsoft Windows | 1 | 33.3% |
EAll entries
| CVE | Vendor | Product | Added | Ransomware |
|---|---|---|---|---|
| CVE-2021-28799 | QNAP | Network Attached Storage (NAS) | Known | |
| CVE-2018-13382 | Fortinet | FortiOS and FortiProxy | Known | |
| CVE-2021-1675 | Microsoft | Windows | Known |
Cite this
3 CISA KEV entries list CWE-285 (Improper authorization), 0.2% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-285/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Pages for weaknesses with fewer than 5 entries are excluded from search indexes.