目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 26625

access:pre-auth 类型相关 26625 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2026-86065 Klever-Go 远程节点拒绝服务漏洞 — klever-go CWE-770 7.5 High 2026-09-23
CVE-2026-93421 Mesop CSP报告端点无认证ANSI转义序列注入漏洞 — mesop CWE-117 5.3 Medium 2026-09-23
CVE-2026-61695 Wire Swift运行时protobuf解码崩溃漏洞 — wire CWE-129 7.5 High 2026-09-23
CVE-2026-90901 Joomla Easy Store 1.0.0-3.0.0 SQL注入漏洞 — Easy Store extension for Joomla CWE-74 8.6 High 2026-09-23
CVE-2026-84474 Ansible AWX view_jobtemplate 权限提升漏洞 — Red Hat Ansible Automation Platform 2 CWE-807 9.9 Critical 2026-09-23
CVE-2026-90899 Joomla Easy Store 3.0.0 未授权PII泄露漏洞 — Easy Store extension for Joomla CWE-200 8.2 High 2026-09-23
CVE-2026-84486 Automation Controller 调试接口未授权拒绝服务漏洞 — Red Hat Ansible Automation Platform 2 CWE-489 8.2 High 2026-09-23
CVE-2026-76087 Formie 未授权提交覆盖漏洞 — formie CWE-639 8.2 High 2026-09-23
CVE-2026-92692 Sulu 未认证 JCR-SQL2 注入漏洞 — sulu CWE-89 6.9 Medium 2026-09-23
CVE-2026-95604 WordPress Loops & Logic 4.2.4 访问控制漏洞 — Loops & Logic CWE-862 7.5 High 2026-09-23
CVE-2026-95600 WordPress插件敏感数据暴露漏洞 — TrustedLogin Connector CWE-497 5.3 Medium 2026-09-23
CVE-2026-95601 WordPress Product Filter插件SQL注入漏洞 — Product Filter by WBW CWE-89 9.3 Critical 2026-09-23
CVE-2026-95592 WordPress Team插件6.0.0前直接对象引用漏洞 — Team CWE-639 5.3 Medium 2026-09-23
CVE-2026-95529 WordPress 表单插件 5.5.1.1 跨站脚本漏洞 — Calculated Fields Form CWE-79 7.1 High 2026-09-23
CVE-2026-95528 WordPress插件Web Vitals 1.0.31 跨站脚本漏洞 — Core Web Vitals & PageSpeed Booster CWE-79 7.1 High 2026-09-23
CVE-2026-95527 WordPress Conekta插件6.2.4访问控制缺陷 — Conekta Payment Gateway CWE-862 6.5 Medium 2026-09-23
CVE-2026-95524 WordPress WP User Frontend 4.3.11 权限绕过漏洞 — WP User Frontend CWE-290 5.3 Medium 2026-09-23
CVE-2026-95515 WordPress Ninja Forms 3.15.3 跨站脚本漏洞 — Ninja Forms CWE-79 7.1 High 2026-09-23
CVE-2026-95514 WordPress Netgsm插件2.10.0绕过漏洞 — Netgsm CWE-289 5.3 Medium 2026-09-23
CVE-2026-95513 vcita插件4.6.0访问控制失效漏洞 — Online Booking & Scheduling Calendar for WordPress by vcita CWE-862 7.5 High 2026-09-23
CVE-2026-94498 WordPress AppMySite 3.15.4 访问控制缺陷 — AppMySite CWE-862 6.5 Medium 2026-09-23
CVE-2026-94487 WordPress PublishPress Capabilities 2.50.1 CSRF漏洞 — PublishPress Capabilities CWE-352 8.1 High 2026-09-23
CVE-2026-94457 WordPress Captcha Code插件3.32之前版本绕过漏洞 — Captcha Code CWE-290 4.8 Medium 2026-09-23
CVE-2026-94179 WordPress Razorpay插件2.4.9跨站脚本漏洞 — Razorpay Payment Button CWE-79 7.1 High 2026-09-23
CVE-2026-94176 WordPress Mang Board 插件 2.4.1 跨站脚本漏洞 — Mang Board WP CWE-79 7.1 High 2026-09-23
CVE-2026-94080 WordPress MarketKing 2.1.70 访问控制缺陷 — MarketKing CWE-862 5.3 Medium 2026-09-23
CVE-2026-94079 WordPress WP User Manager 2.9.19 访问控制漏洞 — WP User Manager CWE-862 5.3 Medium 2026-09-23
CVE-2026-93774 WordPress WP Photo Album Plus 插件跨站脚本漏洞 — WP Photo Album Plus CWE-79 7.1 High 2026-09-23
CVE-2026-93623 WordPress AI Engine 插件不安全直接对象引用漏洞 — AI Engine CWE-639 5.3 Medium 2026-09-23
CVE-2026-93622 WordPress WPS Limit Login 1.5.9.3 跨站脚本漏洞 — WPS Limit Login CWE-79 7.1 High 2026-09-23

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 26625 条 CVE 漏洞。