KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Weakness / #17

CWE-77: Command injection in CISA KEV

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Catalog
2026.09.23
Rank
#17 of 185
MITRE
CWE-77 definition

Answer 30 KEV entries list CWE-77 (Command injection) as of catalog 2026.09.23, 1.7% of the catalog and rank 17 of 185 weaknesses. The most affected vendor is D-Link (5).

Attacker input ends up inside a command the software builds and runs.

KEV entries
301.7% of catalog
Vendors
20affected
Ransomware: known
620%
First added
2021-11-03
Latest added
2026-08-07

VVendors

Vendors with CWE-77 KEV entries
VendorEntriesShare
D-Link516.7%
Ivanti310%
TP-Link26.7%
Cisco26.7%
Palo Alto Networks26.7%
QNAP26.7%
Progress13.3%
BerriAI13.3%
Broadcom13.3%
Smartbedded13.3%
Libraesva13.3%
Fortra13.3%

TAdditions by year

CWE-77 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 2; 2022: 6; 2023: 4; 2024: 7; 2025: 7; 2026: 4.024682021: 2 added220212022: 6 added620222023: 4 added420232024: 7 added720242025: 7 added720252026: 4 added (year to date)42026
CWE-77 KEV additions by year
YearAdded
20212
20226
20234
20247
20257
20264

PProducts

Products with CWE-77 KEV entries
ProductEntriesShare
Palo Alto Networks PAN-OS26.7%
Progress LoadMaster13.3%
BerriAI LiteLLM13.3%
D-Link DIR-823X13.3%
Broadcom VMware Aria Operations13.3%
Smartbedded Meteobridge13.3%
Libraesva Email Security Gateway13.3%
Fortra GoAnywhere MFT13.3%

EAll entries

KEV entries listing CWE-77
CVEVendorProductAddedRansomware
CVE-2026-8037ProgressLoadMasterUnknown
CVE-2026-42271BerriAILiteLLMUnknown
CVE-2025-29635D-LinkDIR-823XUnknown
CVE-2026-22719BroadcomVMware Aria OperationsUnknown
CVE-2025-4008SmartbeddedMeteobridgeUnknown
CVE-2025-59689LibraesvaEmail Security GatewayUnknown
CVE-2025-10035FortraGoAnywhere MFTKnown
CVE-2020-25079D-LinkDCS-2530L and DCS-2670L DevicesUnknown
CVE-2016-10033PHPPHPMailerUnknown
CVE-2023-33538TP-LinkMultiple RoutersUnknown
CVE-2023-20118CiscoSmall Business RV Series RoutersUnknown
CVE-2024-12356BeyondTrustPrivileged Remote Access (PRA) and Remote Support (RS) Unknown
CVE-2024-9474Palo Alto NetworksPAN-OSKnown
CVE-2024-9380IvantiCloud Services Appliance (CSA)Unknown
CVE-2024-3400Palo Alto NetworksPAN-OSKnown
CVE-2024-3273D-LinkMultiple NAS DevicesUnknown
CVE-2024-21887IvantiConnect Secure and Policy SecureKnown
CVE-2016-20017D-LinkDSL-2750B DevicesUnknown
CVE-2023-1671SophosWeb ApplianceUnknown
CVE-2023-20887VMwareAria Operations for NetworksUnknown
CVE-2023-1389TP-LinkArcher AX21Unknown
CVE-2022-40765MitelMiVoice ConnectKnown
CVE-2018-19949QNAPNetwork Attached Storage (NAS)Known
CVE-2016-6367CiscoAdaptive Security Appliance (ASA)Unknown
CVE-2010-5330UbiquitiAirOSUnknown
CVE-2020-2509QNAPQNAP Network-Attached Storage (NAS)Unknown
CVE-2016-1555NETGEARWireless Access Point (WAP) DevicesUnknown
CVE-2015-2051D-LinkDIR-645 RouterUnknown
CVE-2021-22899IvantiPulse Connect SecureUnknown
CVE-2019-0541MicrosoftMSHTMLUnknown

Cite this

30 CISA KEV entries list CWE-77 (Command injection), 1.7% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-77/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API