authorization-flaw 1 Broken Access Control – Role Manipulation via User Registration | Tanuki Apr 28, 2026