KEV 2026.10.301,766 entries+10 in 7d11 open federal deadlinesas of / search ? keys
KEV Now

Weakness / #24

CWE-863: Incorrect authorization in CISA KEV

Incorrect Authorization

Catalog
2026.10.30
Rank
#24 of 198
MITRE
CWE-863 definition

Answer 18 KEV entries list CWE-863 (Incorrect authorization) as of catalog 2026.10.30, 1% of the catalog and rank 24 of 198 weaknesses. The most affected vendor is Microsoft (3).

KEV entries
181% of catalog
Vendors
15affected
Ransomware: known
633.3%
First added
2021-11-03
Latest added
2026-09-24

VVendors

Vendors with CWE-863 KEV entries
VendorEntriesShare
Microsoft316.7%
Qualcomm211.1%
Adobe15.6%
JFrog15.6%
Meta Platforms15.6%
Apple15.6%
Oracle15.6%
Apache15.6%
D-Link15.6%
Atlassian15.6%
Ivanti15.6%
Red Hat15.6%

TAdditions by year

CWE-863 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 1; 2022: 3; 2023: 5; 2024: 3; 2025: 4; 2026: 2.02462021: 1 added120212022: 3 added320222023: 5 added520232024: 3 added320242025: 4 added420252026: 2 added (year to date)22026
CWE-863 KEV additions by year
YearAdded
20211
20223
20235
20243
20254
20262

PProducts

Products with CWE-863 KEV entries
ProductEntriesShare
Qualcomm Multiple Chipsets211.1%
Microsoft Windows211.1%
Adobe Commerce and Magento 15.6%
JFrog Artifactory15.6%
Meta Platforms WhatsApp15.6%
Apple iOS and iPadOS15.6%
Oracle Agile Product Lifecycle Management (PLM)15.6%
Apache OFBiz15.6%

EAll entries

KEV entries listing CWE-863
CVEVendorProductAddedRansomware
CVE-2026-71362AdobeCommerce and Magento Unknown
CVE-2026-42016JFrogArtifactoryUnknown
CVE-2025-55177Meta PlatformsWhatsAppUnknown
CVE-2025-21480QualcommMultiple ChipsetsUnknown
CVE-2025-21479QualcommMultiple ChipsetsUnknown
CVE-2025-24200AppleiOS and iPadOSUnknown
CVE-2024-21287OracleAgile Product Lifecycle Management (PLM)Unknown
CVE-2024-38856ApacheOFBizUnknown
CVE-2021-40655D-LinkDIR-605 RouterUnknown
CVE-2023-22518AtlassianConfluence Data Center and ServerKnown
CVE-2023-38035IvantiSentryKnown
CVE-2021-3560Red HatPolkitUnknown
CVE-2023-24880MicrosoftWindowsKnown
CVE-2023-21715MicrosoftOfficeUnknown
CVE-2022-41091MicrosoftWindowsKnown
CVE-2021-30533GoogleChromium PopupBlockerUnknown
CVE-2019-7192QNAPPhoto StationKnown
CVE-2021-22986F5BIG-IP and BIG-IQ Centralized ManagementKnown

Cite this

18 CISA KEV entries list CWE-863 (Incorrect authorization), 1% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-863/

Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings