1A01:2025Broken Access Control
2A01:2025Server-Side Request Forgery (SSRF)
3A02:2025Security Misconfiguration
4A03:2025Software Supply Chain Failures
5A04:2025Cryptographic Failures
6A05:2025Injection
7A06:2025Insecure Design
8A07:2025Authentication Failures
9A08:2025Software & Data Integrity Failures
10A09:2025Security Logging & Alerting Failures
11A10:2025Mishandling of Exceptional Conditions
12FintechPayment API Security & PCI DSS
13FintechSecrets & Key Management
14FintechThird-Party API & Partner Integration Risk
15FintechFraud Vectors & Insider Threat
16FintechMobile Application Security