CWE-1390 类弱点 96 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-1390 属于弱认证漏洞，指产品使用的认证机制无法充分验证用户身份的真实性。攻击者通常利用此缺陷，以较低成本或更快速度绕过身份验证，从而非法获取系统访问权限。开发者应避免使用默认凭证、简单密码或易被破解的算法，转而实施多因素认证、强密码策略及定期密钥轮换，确保身份验证过程具备足够的抗攻击能力。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-69802 | 网络设备安装服务(NDES)远程代码执行漏洞 — Windows Server 2012 | 8.1 | High | 2026-10-13 |
| CVE-2026-85922 | Azure Key Vault 安全功能绕过漏洞 — azure_security_keyvault_certificates | 7.4 | High | 2026-10-13 |
| CVE-2026-83840 | Windows Error Reporting 权限提升漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-10-13 |
| CVE-2026-83511 | Active Directory Federation Services (AD FS) 身份伪造漏洞 — Windows 10 Version 1607 | 7.4 | High | 2026-10-13 |
| CVE-2026-69982 | Active Directory Federation Services 安全功能绕过漏洞 — Windows 10 Version 1607 | 5.9 | Medium | 2026-10-13 |
| CVE-2026-70005 | Active Directory Federation Services 安全功能绕过漏洞 — Windows Server 2019 | 5.9 | Medium | 2026-10-13 |
| CVE-2026-85939 | Windows 内核安全特性绕过漏洞 — Windows 10 Version 1607 | 5.3 | Medium | 2026-10-13 |
| CVE-2026-83674 | Active Directory Federation Services (AD FS) 欺骗漏洞 — Windows 10 Version 1607 | 8.1 | High | 2026-10-13 |
| CVE-2026-88101 | 微软输入法编辑器提权漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-10-13 |
| CVE-2026-85376 | Windows Print Spooler 组件提权漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-10-13 |
| CVE-2026-85328 | Windows 投影文件系统提权漏洞 — Windows 10 Version 1809 | 7.0 | High | 2026-10-13 |
| CVE-2026-85323 | NDES服务欺骗漏洞 — Windows 10 Version 1607 | 6.8 | Medium | 2026-10-13 |
| CVE-2026-83586 | Windows 文件系统去重服务提权漏洞 — Windows 11 version 23H2 | 7.8 | High | 2026-10-13 |
| CVE-2026-83681 | Microsoft PowerToys 权限提升漏洞 — Microsoft PowerToys | 5.5 | Medium | 2026-10-13 |
| CVE-2026-83657 | Windows 现代设备管理（MDM）篡改漏洞 — Windows 10 Version 1809 | 5.5 | Medium | 2026-10-13 |
| CVE-2026-96940 | Microsoft Exchange Server 权限提升漏洞 — Microsoft Exchange Server 2016 Cumulative Update 23 | 8.8 | High | 2026-10-02 |
| CVE-2026-93355 | LiteLLM 基于邮件用户查找的弱 JWT 认证漏洞 — litellm | 8.1 | High | 2026-09-28 |
| CVE-2026-92289 | Lemonldap::NG Portal 2.23.0-2.23.3 PKCE绕过漏洞 | - | - | 2026-09-25 |
| CVE-2026-92288 | Lemonldap::NG Portal 2.20.0-2.23.4 OAuth2令牌信息泄漏漏洞 | - | - | 2026-09-25 |
| CVE-2026-77483 | Microsoft SQL Server 授权问题漏洞 — Microsoft SQL Server 2017 (CU 31) | 8.8 | High | 2026-09-08 |
| CVE-2026-73025 | Microsoft Windows 授权问题漏洞 — Windows 10 Version 1607 | 9.8 | Critical | 2026-09-08 |
| CVE-2026-73819 | Ebyte NA111-M 授权问题漏洞 — Ebyte NA111-M Firmware | 9.8 | Critical | 2026-08-31 |
| CVE-2026-65098 | NVIDIA NemoClaw 授权问题漏洞 — NemoClaw | 8.1 | High | 2026-08-25 |
| CVE-2026-68067 | Quanovate Mira Firmware 授权问题漏洞 — Mira Firmware | 9.8 | Critical | 2026-08-11 |
| CVE-2026-59135 | Microsoft Windows Search Component 授权问题漏洞 — Windows 10 Version 1607 | 5.5 | Medium | 2026-08-11 |
| CVE-2026-59554 | WordPress Ziina 授权问题漏洞 — Ziina | 7.5 | High | 2026-07-23 |
| CVE-2026-55040 | Microsoft Office Sharepoint Server 授权问题漏洞 — Microsoft SharePoint Enterprise Server 2016 | 9.1 | Critical | 2026-07-14 |
| CVE-2026-10714 | Rockwell Automation FactoryTalk® Services Platform 授权问题漏洞 — FactoryTalk® Services Platform | - | - | 2026-07-14 |
| CVE-2026-57352 | VillaTheme ALD 授权问题漏洞 — ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce | 4.8 | Medium | 2026-07-02 |
| CVE-2026-0274 | Palo Alto Networks Cortex XSIAM CommvaultSecurityIQ Marketplace和Palo Alto Networks Cortex XSOAR CommvaultSecurityIQ Marketplace 安全漏洞 — Cortex XSIAM CommvaultSecurityIQ Marketplace | - | - | 2026-06-10 |
CWE-1390 是常见的弱点类别，本平台收录该类弱点关联的 96 条 CVE 漏洞。