CWE-799 交互频率的控制不恰当 类弱点 59 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-799 指产品未适当限制与交互方（如用户或自动化脚本）的交互频率或次数。攻击者常通过高频发送请求或重复执行操作，利用此缺陷耗尽系统资源导致拒绝服务，或绕过业务逻辑限制。开发者应实施速率限制、请求计数及令牌桶算法，确保交互频率在预期范围内，从而有效防御此类滥用行为。
char username[USERNAME_SIZE]; char password[PASSWORD_SIZE]; while (isValidUser == 0) { if (getNextMessage(socket, username, USERNAME_SIZE) > 0) { if (getNextMessage(socket, password, PASSWORD_SIZE) > 0) { isValidUser = AuthenticateUser(username, password); } } } return(SUCCESS);int count = 0; while ((isValidUser == 0) && (count < MAX_ATTEMPTS)) { if (getNextMessage(socket, username, USERNAME_SIZE) > 0) { if (getNextMessage(socket, password, PASSWORD_SIZE) > 0) { isValidUser = AuthenticateUser(username, password); } } count++; } if (isValidUser) { return(SUCCESS); } else { return(FAIL); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-115480 | baserCMS 邮件表单绕过图片验证码漏洞 — basercms | 5.3 | Medium | 2026-10-23 |
| CVE-2026-115359 | OpenBao 2.6.4 和 2.7.1 前版本请求解析绕过漏洞 — openbao | 3.7 | Low | 2026-10-22 |
| CVE-2026-96364 | Webform 模块权限绕过漏洞 — Webform | - | - | 2026-10-22 |
| CVE-2026-107830 | Jivejdon /account/smsVRAction 缺少速率限制漏洞 — jivejdon | 5.3 | Medium | 2026-10-08 |
| CVE-2026-82924 | Pusula Expert Mail 因缺乏速率限制导致个人数据枚举 — Expert Mail | 5.3 | Medium | 2026-10-06 |
| CVE-2026-97300 | WordPress WP Event Solution插件<=4.1.25 访问控制漏洞 — WP Event Solution | 6.5 | Medium | 2026-10-06 |
| CVE-2026-100603 | ClawHub 技能隐藏漏洞 — clawhub | 5.4 | Medium | 2026-09-26 |
| CVE-2025-36045 | TS4300磁带库安全漏洞 — TS4300 | 4.3 | Medium | 2026-09-18 |
| CVE-2025-13882 | IBM Sterling Partner Engagement Manager 多漏洞 — Sterling Partner Engagement Manager Essentials Edition | 5.3 | Medium | 2026-09-18 |
| CVE-2026-54594 | OmniBlocks 讨论区 disc.yml 垃圾信息发送漏洞 — monorepo | 5.3 | Medium | 2026-09-17 |
| CVE-2026-85586 | phpMyFAQ 资源管理错误漏洞 — phpMyFAQ | 6.9 | Medium | 2026-09-04 |
| CVE-2026-54738 | LemmyNet lemmy 资源管理错误漏洞 — lemmy | 6.5 | Medium | 2026-08-19 |
| CVE-2024-23565 | HCL Aftermarket EPC 资源管理错误漏洞 — Aftermarket EPC | 5.3 | Medium | 2026-07-17 |
| CVE-2026-33434 | Wazuh 资源管理错误漏洞 — wazuh | 4.3 | Medium | 2026-07-16 |
| CVE-2026-5233 | MIA Technology Inc Pizzy Library 资源管理错误漏洞 — Pizzy Library | 7.1 | High | 2026-06-15 |
| CVE-2026-7402 | MeWare PDKS 安全漏洞 — PDKS | 8.1 | High | 2026-04-30 |
| CVE-2026-41346 | OpenClaw 安全漏洞 — OpenClaw | 5.3 | Medium | 2026-04-23 |
| CVE-2026-41343 | OpenClaw 安全漏洞 — OpenClaw | 5.3 | Medium | 2026-04-23 |
| CVE-2026-41333 | OpenClaw 安全漏洞 — OpenClaw | 3.7 | Low | 2026-04-23 |
| CVE-2025-55268 | HCL Aftermarket DPC 安全漏洞 — Aftermarket DPC | 4.3 | Medium | 2026-03-26 |
| CVE-2025-13212 | IBM Aspera Console 安全漏洞 — Aspera Console | 5.3 | Medium | 2026-03-13 |
| CVE-2026-22216 | WordPress plugin wpDiscuz 安全漏洞 — wpDiscuz | 6.5 | Medium | 2026-03-13 |
| CVE-2026-30972 | Parse Server 安全漏洞 — parse-server | 5.3AI | Medium AI | 2026-03-10 |
| CVE-2026-24017 | Fortinet FortiWeb 安全漏洞 — FortiWeb | 7.3 | High | 2026-03-10 |
| CVE-2025-13211 | IBM Aspera Orchestrator 安全漏洞 — Aspera Orchestrator | 5.3 | Medium | 2025-12-11 |
| CVE-2025-57816 | Fides 安全漏洞 — fides | 7.5AI | High AI | 2025-09-08 |
| CVE-2024-47065 | Meshtastic 安全漏洞 — firmware | 5.3AI | Medium AI | 2025-07-11 |
| CVE-2025-52880 | Komga 安全漏洞 — komga | 4.2 | Medium | 2025-06-24 |
| CVE-2025-52570 | letmein 安全漏洞 — letmein | 6.5AI | Medium AI | 2025-06-24 |
| CVE-2025-48016 | Schweitzer Engineering Laboratories SEL Series 安全漏洞 — SEL-5056 Software-Defined Network Flow Controller | 4.3 | Medium | 2025-05-20 |
CWE-799（交互频率的控制不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 59 条 CVE 漏洞。