Weakness / #15
CWE-89: SQL injection in CISA KEV
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Answer 33 KEV entries list CWE-89 (SQL injection) as of catalog 2026.10.30, 1.9% of the catalog and rank 15 of 198 weaknesses. The most affected vendor is Fortinet (3).
Attacker input changes the meaning of a database query.
- KEV entries
- 331.9% of catalog
- Vendors
- 25affected
- Ransomware: known
- 1133.3%
- First added
- 2021-11-03
- Latest added
- 2026-10-23
VVendors
TAdditions by year
| Year | Added |
|---|---|
| 2021 | 6 |
| 2022 | 6 |
| 2023 | 3 |
| 2024 | 5 |
| 2025 | 4 |
| 2026 | 9 |
PProducts
| Product | Entries | Share |
|---|---|---|
| Fortinet FortiClient EMS | 2 | 6.1% |
| Arista VeloCloud Orchestrator | 1 | 3% |
| Cisco Secure Email Gateway | 1 | 3% |
| Sangoma Switchvox | 1 | 3% |
| Metabase Metabase | 1 | 3% |
| WordPress Core | 1 | 3% |
| Drupal Core | 1 | 3% |
| BerriAI LiteLLM | 1 | 3% |
EAll entries
Cite this
33 CISA KEV entries list CWE-89 (SQL injection), 1.9% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-89/
Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.