Improper Access Control

Vulnerability

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 28, 2025

Last Seen

August 27, 2026

API

Improper Access Control is a vulnerability class where systems fail to enforce proper permissions, allowing unauthorized access, actions, or resource creation.

Overview

Recent Events

Related Clusters (3)

Related Entities

Velvet Ant Authentication Bypass Command Injection Cross-site Scripting DDoS Privilege Escalation Sql Injection Cisco Ivanti Palo Alto CVE-2026-77537 CVE-2026-77538

Improper Access Control

Overview

Recent Events

Profile

Exploited By

Tools Used

Related CVEs

MITRE Techniques

Affected Platforms

Related Clusters (3)

Ubiquiti Patches Three Critical Vulnerabilities in UniFi Products

Azure API Management Flaw Allows Unauthorized Cross-Tenant Account Creation

2025 CWE Top 25 Most Dangerous Software Weaknesses Released

Related Articles (4)

CC-4837

MITRE Releases 2025 List of Top 25 Most Dangerous Software Vulnerabilities

MITRE shares 2025's top 25 most dangerous software weaknesses

Azure APIM Developer Portal Flaw Allows Unauthorized Account Creation

Related Entities