Broken access control failures offer attackers a low-effort, direct path to sensitive data. The simplest bugs are frequently the most dangerous — and the most embarrassingly neglected.
“The easiest bugs to fix are often the easiest to exploit. Fix them first.”