KEV 2026.10.301,766 entries+10 in 7d11 open federal deadlinesas of / search ? keys
KEV Now

Weakness / #13

CWE-77: Command injection in CISA KEV

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Catalog
2026.10.30
Rank
#13 of 198
MITRE
CWE-77 definition

Answer 33 KEV entries list CWE-77 (Command injection) as of catalog 2026.10.30, 1.9% of the catalog and rank 13 of 198 weaknesses. The most affected vendor is D-Link (5).

Attacker input ends up inside a command the software builds and runs.

KEV entries
331.9% of catalog
Vendors
22affected
Ransomware: known
618.2%
First added
2021-11-03
Latest added
2026-10-14

VVendors

Vendors with CWE-77 KEV entries
VendorEntriesShare
D-Link515.2%
Ivanti39.1%
Microsoft26.1%
TP-Link26.1%
Cisco26.1%
Palo Alto Networks26.1%
QNAP26.1%
Ahsay13%
Apache13%
Progress13%
BerriAI13%
Broadcom13%

TAdditions by year

CWE-77 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 2; 2022: 6; 2023: 4; 2024: 7; 2025: 7; 2026: 7.024682021: 2 added220212022: 6 added620222023: 4 added420232024: 7 added720242025: 7 added720252026: 7 added (year to date)72026
CWE-77 KEV additions by year
YearAdded
20212
20226
20234
20247
20257
20267

PProducts

Products with CWE-77 KEV entries
ProductEntriesShare
Palo Alto Networks PAN-OS26.1%
Ahsay AhsayCBS13%
Microsoft Windows13%
Apache Struts13%
Progress LoadMaster13%
BerriAI LiteLLM13%
D-Link DIR-823X13%
Broadcom VMware Aria Operations13%

EAll entries

KEV entries listing CWE-77
CVEVendorProductAddedRansomware
CVE-2026-105134AhsayAhsayCBSUnknown
CVE-2026-96951MicrosoftWindowsUnknown
CVE-2016-3081ApacheStrutsUnknown
CVE-2026-8037ProgressLoadMasterUnknown
CVE-2026-42271BerriAILiteLLMUnknown
CVE-2025-29635D-LinkDIR-823XUnknown
CVE-2026-22719BroadcomVMware Aria OperationsUnknown
CVE-2025-4008SmartbeddedMeteobridgeUnknown
CVE-2025-59689LibraesvaEmail Security GatewayUnknown
CVE-2025-10035FortraGoAnywhere MFTKnown
CVE-2020-25079D-LinkDCS-2530L and DCS-2670L DevicesUnknown
CVE-2016-10033PHPPHPMailerUnknown
CVE-2023-33538TP-LinkMultiple RoutersUnknown
CVE-2023-20118CiscoSmall Business RV Series RoutersUnknown
CVE-2024-12356BeyondTrustPrivileged Remote Access (PRA) and Remote Support (RS) Unknown
CVE-2024-9474Palo Alto NetworksPAN-OSKnown
CVE-2024-9380IvantiCloud Services Appliance (CSA)Unknown
CVE-2024-3400Palo Alto NetworksPAN-OSKnown
CVE-2024-3273D-LinkMultiple NAS DevicesUnknown
CVE-2024-21887IvantiConnect Secure and Policy SecureKnown
CVE-2016-20017D-LinkDSL-2750B DevicesUnknown
CVE-2023-1671SophosWeb ApplianceUnknown
CVE-2023-20887VMwareAria Operations for NetworksUnknown
CVE-2023-1389TP-LinkArcher AX21Unknown
CVE-2022-40765MitelMiVoice ConnectKnown
CVE-2018-19949QNAPNetwork Attached Storage (NAS)Known
CVE-2016-6367CiscoAdaptive Security Appliance (ASA)Unknown
CVE-2010-5330UbiquitiAirOSUnknown
CVE-2020-2509QNAPQNAP Network-Attached Storage (NAS)Unknown
CVE-2016-1555NETGEARWireless Access Point (WAP) DevicesUnknown
CVE-2015-2051D-LinkDIR-645 RouterUnknown
CVE-2021-22899IvantiPulse Connect SecureUnknown
CVE-2019-0541MicrosoftMSHTMLUnknown

Cite this

33 CISA KEV entries list CWE-77 (Command injection), 1.9% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-77/

Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings