CWE-266
Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Impactr finds and proves whether CWE-266 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.