NIST 800-53 r5 · Controls catalogue · Family AC
AC-10Concurrent Session Control
Limit the number of concurrent sessions for each {{ insert: param, ac-10_odp.01 }} to {{ insert: param, ac-10_odp.02 }}.
Last updated: 20 August 2026 14:15 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (4)
Weaknesses this control addresses (2)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-400 | Uncontrolled Resource Consumption | 3,800+ | Limiting concurrent sessions directly prevents uncontrolled resource consumption by capping the number of active sessions per user or account. |
CWE-770 | Allocation of Resources Without Limits or Throttling | 2,400+ | This control implements explicit throttling on session allocation, addressing the weakness of allocating resources without limits. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2023-50387 UPD | 8.5 | 7.5 | 1.0000 | good |
CVE-2024-27316 UPD | 8.4 | 7.5 | 0.9133 | good |
CVE-2025-48976 UPD | 8.3 | 7.5 | 0.6782 | good |
CVE-2025-48988 UPD | 8.1 | 7.5 | 0.5696 | good |
CVE-2024-6037 UPD | 7.8 | 9.1 | 0.1061 | good |
CVE-2021-42142 UPD | 7.5 | 9.8 | 0.0099 | good |
CVE-2021-47137 UPD | 7.4 | 9.8 | 0.0060 | good |
CVE-2024-44241 UPD | 7.4 | 9.8 | 0.0057 | good |
CVE-2026-40498 | 7.4 | 9.8 | 0.0057 | good |
CVE-2025-54321 | 7.3 | 9.8 | 0.0047 | good |
CVE-2020-37067 UPD | 7.3 | 9.8 | 0.0037 | good |
CVE-2026-31283 UPD | 7.3 | 9.8 | 0.0040 | good |
CVE-2026-74878 | 7.3 | 9.8 | 0.0037 | good |
CVE-2024-38821 UPD | 7.2 | 9.1 | 0.0174 | good |
CVE-2025-11832 UPD | 7.2 | 9.8 | 0.0034 | good |
CVE-2021-47875 UPD | 7.2 | 9.8 | 0.0036 | good |
CVE-2026-21710 UPD | 7.2 | 7.5 | 0.2504 | good |
CVE-2024-2878 UPD | 7.1 | 7.5 | 0.1926 | good |
CVE-2024-28182 UPD | 7.0 | 5.3 | 0.8496 | good |
CVE-2024-12705 UPD | 7.0 | 7.5 | 0.1794 | good |
CVE-2025-22273 UPD | 7.0 | 9.3 | 0.0059 | good |
CVE-2026-48853 | 7.0 | 9.2 | 0.0057 | good |
CVE-2026-12818 | 7.0 | 9.3 | 0.0025 | good |
CVE-2025-68456 | 6.9 | 9.1 | 0.0049 | good |
CVE-2026-25804 UPD | 6.9 | 9.1 | 0.0044 | good |