cookie-manipulation 2 Local File Inclusion via Language Cookie Leads to Arbitrary File Read | Flagged Jun 4, 2026 Broken Access Control – Privilege Escalation via Client-Controlled Cookie | Privilege Escalation via Client-Controlled Cookie Mar 28, 2026