KEV 2026.10.301,766 entries+10 in 7d11 open federal deadlinesas of / search ? keys
KEV Now

Weakness / #22

CWE-269: Improper privilege management in CISA KEV

Improper Privilege Management

Catalog
2026.10.30
Rank
#22 of 198
MITRE
CWE-269 definition

Answer 19 KEV entries list CWE-269 (Improper privilege management) as of catalog 2026.10.30, 1.1% of the catalog and rank 22 of 198 weaknesses. The most affected vendor is Microsoft (9).

KEV entries
191.1% of catalog
Vendors
10affected
Ransomware: known
526.3%
First added
2021-11-03
Latest added
2026-10-02

VVendors

Vendors with CWE-269 KEV entries
VendorEntriesShare
Microsoft947.4%
Linux210.5%
Zammad GmbH15.3%
ConnectWise15.3%
Oracle15.3%
Citrix15.3%
MinIO15.3%
Samsung15.3%
EyesOfNetwork15.3%
VMware15.3%

TAdditions by year

CWE-269 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 4; 2022: 5; 2023: 2; 2024: 2; 2025: 2; 2026: 4.02462021: 4 added420212022: 5 added520222023: 2 added220232024: 2 added220242025: 2 added220252026: 4 added (year to date)42026
CWE-269 KEV additions by year
YearAdded
20214
20225
20232
20242
20252
20264

PProducts

Products with CWE-269 KEV entries
ProductEntriesShare
Microsoft Windows736.8%
Linux Kernel210.5%
Zammad GmbH Zammad15.3%
ConnectWise ScreenConnect15.3%
Oracle E-Business Suite15.3%
Citrix Session Recording15.3%
Microsoft Partner Center15.3%
MinIO MinIO15.3%

EAll entries

KEV entries listing CWE-269
CVEVendorProductAddedRansomware
CVE-2026-102490Zammad GmbHZammadUnknown
CVE-2026-84869ConnectWiseScreenConnectUnknown
CVE-2026-46817OracleE-Business SuiteUnknown
CVE-2026-21533MicrosoftWindowsUnknown
CVE-2024-8068CitrixSession RecordingUnknown
CVE-2024-49035MicrosoftPartner CenterUnknown
CVE-2024-38014MicrosoftWindowsUnknown
CVE-2024-26169MicrosoftWindowsKnown
CVE-2023-28434MinIOMinIOUnknown
CVE-2019-1388MicrosoftWindowsKnown
CVE-2021-25337SamsungMobile DevicesUnknown
CVE-2014-3153LinuxKernelUnknown
CVE-2021-42287MicrosoftActive DirectoryKnown
CVE-2021-34484MicrosoftWindowsUnknown
CVE-2020-0787MicrosoftWindowsKnown
CVE-2019-13272LinuxKernelUnknown
CVE-2021-34527MicrosoftWindowsKnown
CVE-2020-8655EyesOfNetworkEyesOfNetworkUnknown
CVE-2020-3950VMwareMultiple ProductsUnknown

Cite this

19 CISA KEV entries list CWE-269 (Improper privilege management), 1.1% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-269/

Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings