Broken Authentication

A category of vulnerabilities where authentication mechanisms are improperly implemented, allowing attackers to compromise passwords, tokens, or session management.