KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Weakness / #9

CWE-287: Improper authentication in CISA KEV

Improper Authentication

Catalog
2026.09.23
Rank
#9 of 185
MITRE
CWE-287 definition

Answer 47 KEV entries list CWE-287 (Improper authentication) as of catalog 2026.09.23, 2.7% of the catalog and rank 9 of 185 weaknesses. The most affected vendor is Microsoft (7).

The software does not properly prove that a user is who they claim to be.

KEV entries
472.7% of catalog
Vendors
31affected
Ransomware: known
1634%
First added
2021-11-03
Latest added
2026-09-11

VVendors

Vendors with CWE-287 KEV entries
VendorEntriesShare
Microsoft714.9%
Ivanti510.6%
Veritas36.4%
JFrog24.3%
Check Point24.3%
Cisco24.3%
Dahua24.3%
BerriAI12.1%
Kestra12.1%
ownCloud12.1%
Apple12.1%
Oracle12.1%

TAdditions by year

CWE-287 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 5; 2022: 6; 2023: 5; 2024: 9; 2025: 6; 2026: 16.051015202021: 5 added520212022: 6 added620222023: 5 added520232024: 9 added920242025: 6 added620252026: 16 added (year to date)162026
CWE-287 KEV additions by year
YearAdded
20215
20226
20235
20249
20256
202616

PProducts

Products with CWE-287 KEV entries
ProductEntriesShare
Microsoft Exchange Server48.5%
Veritas Backup Exec Agent36.4%
JFrog Artifactory24.3%
Microsoft Windows24.3%
Dahua IP Camera Firmware24.3%
BerriAI LiteLLM12.1%
Kestra Kestra OSS12.1%
ownCloud ownCloud12.1%

EAll entries

KEV entries listing CWE-287
CVEVendorProductAddedRansomware
CVE-2026-42018JFrogArtifactoryUnknown
CVE-2026-82329JFrogArtifactoryUnknown
CVE-2026-59822BerriAILiteLLMUnknown
CVE-2026-49869KestraKestra OSSUnknown
CVE-2023-49105ownCloudownCloudUnknown
CVE-2026-65400ApplemacOSUnknown
CVE-2026-16232Check PointSmartConsoleUnknown
CVE-2026-46817OracleE-Business SuiteUnknown
CVE-2026-50751Check PointSecurity GatewayKnown
CVE-2022-0492LinuxKernelUnknown
CVE-2026-20182CiscoCatalyst SD-WANUnknown
CVE-2025-32975QuestKACE Systems Management Appliance (SMA)Unknown
CVE-2023-27351PaperCutNG/MFKnown
CVE-2017-7921HikvisionMultiple ProductsUnknown
CVE-2026-20127CiscoCatalyst SD-WAN Controller and ManagerUnknown
CVE-2019-19006SangomaFreePBXUnknown
CVE-2016-7836SKYSEAClient ViewUnknown
CVE-2015-7755JuniperScreenOSUnknown
CVE-2025-49706MicrosoftSharePointKnown
CVE-2025-3935ConnectWiseScreenConnectUnknown
CVE-2021-32030ASUSRoutersUnknown
CVE-2024-53704SonicWallSonicOSKnown
CVE-2024-11680ProjectSendProjectSendUnknown
CVE-2024-49039MicrosoftWindowsKnown
CVE-2024-8956PTZOpticsPT30X-SDI/NDI CamerasUnknown
CVE-2024-7593IvantiVirtual Traffic ManagerUnknown
CVE-2021-33045DahuaIP Camera FirmwareUnknown
CVE-2021-33044DahuaIP Camera FirmwareUnknown
CVE-2024-21410MicrosoftExchange ServerUnknown
CVE-2023-35082IvantiEndpoint Manager Mobile (EPMM) and MobileIron CoreKnown
CVE-2023-46805IvantiConnect Secure and Policy SecureKnown
CVE-2023-35078IvantiEndpoint Manager Mobile (EPMM)Known
CVE-2023-20867VMwareToolsUnknown
CVE-2021-27878VeritasBackup Exec AgentKnown
CVE-2021-27877VeritasBackup Exec AgentKnown
CVE-2021-27876VeritasBackup Exec AgentKnown
CVE-2021-39226Grafana LabsGrafanaUnknown
CVE-2018-10561DasanGigabit Passive Optical Network (GPON) RoutersUnknown
CVE-2015-1187D-Link and TRENDnetMultiple DevicesUnknown
CVE-2019-0543MicrosoftWindowsKnown
CVE-2021-33766MicrosoftExchange ServerUnknown
CVE-2021-32648October CMSOctober CMSUnknown
CVE-2021-34523MicrosoftExchange ServerKnown
CVE-2021-22893IvantiPulse Connect SecureKnown
CVE-2020-5849UnraidUnraidUnknown
CVE-2020-12812FortinetFortiOSKnown
CVE-2020-0688MicrosoftExchange ServerKnown

Cite this

47 CISA KEV entries list CWE-287 (Improper authentication), 2.7% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-287/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API