Weakness / #15
CWE-89: SQL injection in CISA KEV
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Answer 32 KEV entries list CWE-89 (SQL injection) as of catalog 2026.09.23, 1.9% of the catalog and rank 15 of 185 weaknesses. The most affected vendor is Fortinet (3).
Attacker input changes the meaning of a database query.
- KEV entries
- 321.9% of catalog
- Vendors
- 24affected
- Ransomware: known
- 1134.4%
- First added
- 2021-11-03
- Latest added
- 2026-09-14
VVendors
TAdditions by year
| Year | Added |
|---|---|
| 2021 | 6 |
| 2022 | 6 |
| 2023 | 3 |
| 2024 | 5 |
| 2025 | 4 |
| 2026 | 8 |
PProducts
| Product | Entries | Share |
|---|---|---|
| Fortinet FortiClient EMS | 2 | 6.2% |
| Cisco Secure Email Gateway | 1 | 3.1% |
| Sangoma Switchvox | 1 | 3.1% |
| Metabase Metabase | 1 | 3.1% |
| WordPress Core | 1 | 3.1% |
| Drupal Core | 1 | 3.1% |
| BerriAI LiteLLM | 1 | 3.1% |
| Microsoft Configuration Manager | 1 | 3.1% |
EAll entries
Cite this
32 CISA KEV entries list CWE-89 (SQL injection), 1.9% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-89/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.