IDOR (Insecure Direct Object Reference)

An access control vulnerability where a user can access other users' resources by modifying an identifier in the request (numeric ID, UUID). IDORs are common in REST APIs and allow viewing, modifying, or deleting other users' data. It is one of the most frequently found flaws during SMB audits.