NIST 800-53 r5 · Controls catalogue · Family AC
AC-10Concurrent Session Control
Limit the number of concurrent sessions for each {{ insert: param, ac-10_odp.01 }} to {{ insert: param, ac-10_odp.02 }}.
Last updated: 15 October 2026 07:26 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (4)
Weaknesses this control addresses (2)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-400 | Uncontrolled Resource Consumption | 4,300+ | Limiting concurrent sessions directly prevents uncontrolled resource consumption by capping the number of active sessions per user or account. |
CWE-770 | Allocation of Resources Without Limits or Throttling | 2,800+ | This control implements explicit throttling on session allocation, addressing the weakness of allocating resources without limits. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2023-50387 UPD | 8.5 | 7.5 | 0.9999 | good |
CVE-2024-27316 UPD | 8.4 | 7.5 | 0.9133 | good |
CVE-2024-6037 UPD | 7.8 | 9.1 | 0.1069 | good |
CVE-2021-42142 UPD | 7.5 | 9.8 | 0.0099 | good |
CVE-2025-48976 UPD | 7.5 | 7.5 | 0.3296 | good |
CVE-2021-47137 UPD | 7.4 | 9.8 | 0.0060 | good |
CVE-2024-44241 UPD | 7.4 | 9.8 | 0.0058 | good |
CVE-2025-48988 UPD | 7.4 | 7.5 | 0.3051 | good |
CVE-2026-40498 | 7.4 | 9.8 | 0.0073 | good |
CVE-2026-74878 UPD | 7.4 | 9.8 | 0.0075 | good |
CVE-2025-54321 | 7.3 | 9.8 | 0.0047 | good |
CVE-2021-47875 UPD | 7.3 | 9.8 | 0.0040 | good |
CVE-2020-37067 UPD | 7.3 | 9.8 | 0.0043 | good |
CVE-2026-31283 UPD | 7.3 | 9.8 | 0.0055 | good |
CVE-2026-47891 | 7.3 | 9.8 | 0.0052 | good |
CVE-2024-38821 UPD | 7.2 | 9.1 | 0.0174 | good |
CVE-2025-11832 UPD | 7.2 | 9.8 | 0.0037 | good |
CVE-2026-21710 UPD | 7.2 | 7.5 | 0.2504 | good |
CVE-2026-82439 | 7.2 | 9.8 | 0.0034 | partial |
CVE-2024-2878 UPD | 7.1 | 7.5 | 0.1973 | good |
CVE-2024-28182 UPD | 7.0 | 5.3 | 0.8496 | good |
CVE-2024-12705 UPD | 7.0 | 7.5 | 0.1837 | good |
CVE-2025-22273 UPD | 7.0 | 9.3 | 0.0062 | good |
CVE-2026-48853 UPD | 7.0 | 9.2 | 0.0078 | good |
CVE-2026-12818 | 7.0 | 9.3 | 0.0043 | good |