access:pre-auth 类型相关 24933 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-33203 | SiYuan 访问控制错误漏洞 — siyuan CWE-248 | 7.5 | High | 2026-03-20 |
| CVE-2026-23536 | Red Hat OpenShift AI 路径遍历漏洞 — Red Hat OpenShift AI (RHOAI) CWE-22 | 7.5 | High | 2026-03-20 |
| CVE-2026-3584 | WordPress plugin Kali Forms 代码注入漏洞 — Kali Forms — Contact Form & Drag-and-Drop Builder CWE-94 | 9.8 | Critical | 2026-03-20 |
| CVE-2026-33143 | OneUptime 数据伪造问题漏洞 — oneuptime CWE-345 | 5.3 | - | 2026-03-20 |
| CVE-2026-29794 | Vikunja 安全漏洞 — vikunja CWE-807 | 5.3 | Medium | 2026-03-20 |
| CVE-2026-32595 | Traefik 安全漏洞 — traefik CWE-208 | 3.7 | - | 2026-03-20 |
| CVE-2026-33072 | FileRise 安全漏洞 — FileRise CWE-798 | 8.2 | High | 2026-03-20 |
| CVE-2026-33070 | FileRise 访问控制错误漏洞 — FileRise CWE-306 | 3.7 | Low | 2026-03-20 |
| CVE-2026-33057 | Mesop 代码注入漏洞 — mesop CWE-94 | 9.8 | Critical | 2026-03-20 |
| CVE-2026-33043 | WWBN AVideo 安全漏洞 — AVideo CWE-942 | 8.1 | High | 2026-03-20 |
| CVE-2026-33041 | WWBN AVideo 信息泄露漏洞 — AVideo CWE-200 | 5.3 | Medium | 2026-03-20 |
| CVE-2026-33040 | rust-libp2p 输入验证错误漏洞 — rust-libp2p CWE-190 | 7.5 | - | 2026-03-20 |
| CVE-2026-33038 | WWBN AVideo 安全漏洞 — AVideo CWE-306 | 8.1 | High | 2026-03-20 |
| CVE-2026-33035 | WWBN AVideo 跨站脚本漏洞 — AVideo CWE-79 | 6.1 | - | 2026-03-20 |
| CVE-2026-33024 | AVideo 代码问题漏洞 — AVideo-Encoder CWE-918 | 9.8 | - | 2026-03-20 |
| CVE-2026-33017 | Langflow 安全漏洞 — langflow CWE-94 | 9.8 | - | 2026-03-20 |
| CVE-2026-4136 | WordPress plugin Membership Plugin – Restrict Content 授权问题漏洞 — Membership Plugin – Restrict Content CWE-640 | 4.3 | Medium | 2026-03-20 |
| CVE-2026-4038 | WordPress plugin Aimogen Pro 安全漏洞 — Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit CWE-862 | 9.8 | Critical | 2026-03-20 |
| CVE-2026-32940 | SiYuan 安全漏洞 — siyuan CWE-79 | 9.3 | Critical | 2026-03-20 |
| CVE-2026-32890 | Anchorr 安全漏洞 — Anchorr CWE-79 | 9.7 | Critical | 2026-03-20 |
| CVE-2026-21992 | Oracle Identity Manager 安全漏洞 — Oracle Identity Manager | 9.8 | Critical | 2026-03-20 |
| CVE-2026-4465 | D-Link DIR-513 操作系统命令注入漏洞 — DIR-513 CWE-78 | 6.3 | Medium | 2026-03-20 |
| CVE-2026-32817 | Admidio 安全漏洞 — admidio CWE-862 | 9.1 | Critical | 2026-03-20 |
| CVE-2026-32873 | ewe 安全漏洞 — ewe CWE-825 | 7.5 | High | 2026-03-20 |
| CVE-2026-32985 | Xerte Online Toolkits 安全漏洞 — Xerte Online Toolkits CWE-306 | 9.8 | Critical | 2026-03-20 |
| CVE-2026-33368 | Zimbra Collaboration Suite（ZCS） 安全漏洞 — n/a | 6.1 | - | 2026-03-20 |
| CVE-2026-32761 | File Browser 安全漏洞 — filebrowser CWE-284 | 6.5 | Medium | 2026-03-19 |
| CVE-2026-32760 | File Browser 访问控制错误漏洞 — filebrowser CWE-269 | 9.8 | - | 2026-03-19 |
| CVE-2026-33289 | SuiteCRM 注入漏洞 — SuiteCRM CWE-90 | 8.8 | High | 2026-03-19 |
| CVE-2026-29105 | SuiteCRM 输入验证错误漏洞 — SuiteCRM CWE-601 | 5.4 | Medium | 2026-03-19 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24933 条 CVE 漏洞。