Weakness / #9
CWE-287: Improper authentication in CISA KEV
Improper Authentication
Answer 48 KEV entries list CWE-287 (Improper authentication) as of catalog 2026.10.30, 2.7% of the catalog and rank 9 of 198 weaknesses. The most affected vendor is Microsoft (7).
The software does not properly prove that a user is who they claim to be.
- KEV entries
- 482.7% of catalog
- Vendors
- 32affected
- Ransomware: known
- 1633.3%
- First added
- 2021-11-03
- Latest added
- 2026-10-14
VVendors
| Vendor | Entries | Share |
|---|---|---|
| Microsoft | 7 | 14.6% |
| Ivanti | 5 | 10.4% |
| Veritas | 3 | 6.2% |
| JFrog | 2 | 4.2% |
| Check Point | 2 | 4.2% |
| Cisco | 2 | 4.2% |
| Dahua | 2 | 4.2% |
| Ahsay | 1 | 2.1% |
| BerriAI | 1 | 2.1% |
| Kestra | 1 | 2.1% |
| ownCloud | 1 | 2.1% |
| Apple | 1 | 2.1% |
TAdditions by year
| Year | Added |
|---|---|
| 2021 | 5 |
| 2022 | 6 |
| 2023 | 5 |
| 2024 | 9 |
| 2025 | 6 |
| 2026 | 17 |
PProducts
| Product | Entries | Share |
|---|---|---|
| Microsoft Exchange Server | 4 | 8.3% |
| Veritas Backup Exec Agent | 3 | 6.2% |
| JFrog Artifactory | 2 | 4.2% |
| Microsoft Windows | 2 | 4.2% |
| Dahua IP Camera Firmware | 2 | 4.2% |
| Ahsay AhsayCBS | 1 | 2.1% |
| BerriAI LiteLLM | 1 | 2.1% |
| Kestra Kestra OSS | 1 | 2.1% |
EAll entries
Cite this
48 CISA KEV entries list CWE-287 (Improper authentication), 2.7% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-287/
Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.