Authorization bypass through user-controlled key

Named by 6 kept items in this workspace.

3 items name it under classification.key entities and 3 under techniques.

Search every workspace for Authorization bypass through user-controlled key. It matches the name as written, so it can find other things that share it.

The items that name it 6

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
advisoryas techniques2026-10-13It is written here as Authorization bypass through user-controlled key (Microsoft Bookings).
Microsoft Bookings
Why AI Coding Agents Keep Writing Broken Access Control
articleas classification.key entities2026-10-01It is written here as CWE-639.
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
advisoryas techniques2026-09-08
[tl;dr sec] #343 - Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10
articleas techniques2026-08-27It is written here as Insecure direct object reference (CWE-639).
All six AI-generated document portal iterations contained critical IDOR letting any authenticated user access others' documents
CVE-2026-55544: NextCRM is open-source customer relationship management (CRM) software
advisoryas classification.key entitiesIt is written here as CWE-639.
Security Hardening Release for Splunk Apps and Add-ons - August 2026
advisoryas classification.key entitiesIt is written here as CWE-639.

All techniques in this workspace.