NIST 800-53 r5 · Controls catalogue · Family AC
AC-12Session Termination
Automatically terminate a user session after {{ insert: param, ac-12_odp }}.
Last updated: 14 October 2026 20:41 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (6)
Weaknesses this control addresses (2)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-613 | Insufficient Session Expiration | 700+ | Automatically terminating sessions after a defined period directly enforces session expiration, preventing indefinite session lifetimes that attackers can exploit. |
CWE-384 | Session Fixation | 500+ | Session termination after a set interval shortens the usable lifetime of a fixed session identifier, making successful exploitation of session fixation more difficult. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2024-42447 UPD | 7.5 | 9.8 | 0.0093 | good |
CVE-2024-13996 UPD | 7.5 | 9.8 | 0.0106 | good |
CVE-2026-26342 | 7.5 | 9.8 | 0.0097 | good |
CVE-2026-82311 | 7.5 | 9.8 | 0.0098 | partial |
CVE-2024-25718 UPD | 7.4 | 9.8 | 0.0066 | good |
CVE-2024-29401 UPD | 7.4 | 9.8 | 0.0078 | good |
CVE-2024-8888 UPD | 7.4 | 10.0 | 0.0042 | good |
CVE-2026-46455 | 7.4 | 9.8 | 0.0069 | good |
CVE-2026-28564 | 7.4 | 9.8 | 0.0068 | good |
CVE-2026-14950 UPD | 7.4 | 9.8 | 0.0065 | good |
CVE-2026-75171 UPD | 7.4 | 9.8 | 0.0061 | partial |
CVE-2024-43685 UPD | 7.3 | 9.8 | 0.0044 | good |
CVE-2024-13280 UPD | 7.3 | 9.8 | 0.0041 | good |
CVE-2025-53826 UPD | 7.3 | 9.8 | 0.0053 | good |
CVE-2025-59841 UPD | 7.3 | 9.8 | 0.0042 | good |
CVE-2025-54592 | 7.3 | 9.8 | 0.0053 | good |
CVE-2026-1435 | 7.3 | 9.8 | 0.0038 | good |
CVE-2026-21622 UPD | 7.3 | 9.8 | 0.0040 | good |
CVE-2026-84480 | 7.3 | 9.8 | 0.0051 | good |
CVE-2026-79313 | 7.3 | 9.8 | 0.0038 | partial |
CVE-2026-92609 UPD | 7.3 | 9.8 | 0.0044 | partial |
CVE-2025-59786 | 7.2 | 9.8 | 0.0026 | good |
CVE-2024-35049 UPD | 7.0 | 9.1 | 0.0073 | good |
CVE-2024-29070 UPD | 7.0 | 9.1 | 0.0079 | good |
CVE-2024-48827 UPD | 7.0 | 8.8 | 0.0279 | good |