CWE-1271
Uninitialized Value on Reset for Registers Holding Security Settings
Security-critical logic is not set to a known value on reset.
Impactr finds and proves whether CWE-1271 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.