access:pre-auth 类型相关 24933 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-2991 | WordPress plugin KiviCare 授权问题漏洞 — KiviCare – Clinic & Patient Management System (EHR) CWE-287 | 7.3 | High | 2026-03-18 |
| CVE-2026-2992 | WordPress plugin KiviCare 安全漏洞 — KiviCare – Clinic & Patient Management System (EHR) CWE-862 | 8.2 | High | 2026-03-18 |
| CVE-2026-3090 | WordPress plugin Post SMTP 跨站脚本漏洞 — Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App CWE-79 | 7.2 | High | 2026-03-18 |
| CVE-2026-32609 | glances 信息泄露漏洞 — glances CWE-200 | 7.5 | High | 2026-03-18 |
| CVE-2026-22323 | PHOENIX CONTACT FL NAT 跨站请求伪造漏洞 — FL SWITCH 2005 CWE-352 | 7.1 | High | 2026-03-18 |
| CVE-2026-22322 | Phoenix Contact多款产品 跨站脚本漏洞 — FL SWITCH 2005 CWE-79 | 7.1 | High | 2026-03-18 |
| CVE-2026-22321 | Phoenix Contact多款产品 安全漏洞 — FL SWITCH 2005 CWE-121 | 5.3 | Medium | 2026-03-18 |
| CVE-2026-32596 | glances 信息泄露漏洞 — glances CWE-200 | 9.1 | - | 2026-03-18 |
| CVE-2026-32268 | Azure Blob Storage for Craft CMS 安全漏洞 — azure-blob CWE-862 | 4.3 | - | 2026-03-18 |
| CVE-2026-32266 | Google Cloud Storage for Craft CMS 信息泄露漏洞 — google-cloud CWE-200 | 5.3 | - | 2026-03-18 |
| CVE-2026-1926 | WordPress plugin Subscriptions for WooCommerce 安全漏洞 — Subscriptions for WooCommerce CWE-862 | 5.3 | Medium | 2026-03-18 |
| CVE-2026-1780 | WordPress plugin [CR]Paid Link Manager 跨站脚本漏洞 — [CR]Paid Link Manager CWE-79 | 6.1 | Medium | 2026-03-18 |
| CVE-2026-32265 | Amazon S3 for Craft CMS 信息泄露漏洞 — aws-s3 CWE-200 | 4.3 | - | 2026-03-18 |
| CVE-2026-2575 | Keycloak 安全漏洞 — Red Hat build of Keycloak 26.4 CWE-409 | 5.3 | Medium | 2026-03-18 |
| CVE-2026-4356 | itsourcecode University Management System 代码注入漏洞 — University Management System CWE-79 | 2.4 | Low | 2026-03-18 |
| CVE-2025-55043 | Mura 安全漏洞 — n/a | 6.5 | - | 2026-03-18 |
| CVE-2026-21994 | Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit 安全漏洞 — Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit | 9.8 | Critical | 2026-03-17 |
| CVE-2026-1264 | IBM Sterling B2B Integrator和IBM Sterling File Gateway 访问控制错误漏洞 — Sterling B2B Integrator CWE-306 | 7.1 | High | 2026-03-17 |
| CVE-2025-14031 | IBM Sterling B2B Integrator和IBM Sterling File Gateway 命令注入漏洞 — Sterling B2B Integrator CWE-77 | 7.5 | High | 2026-03-17 |
| CVE-2026-32841 | Edimax GS-5008PL 安全漏洞 — Edimax GS-5008PL CWE-1108 | 8.1 | High | 2026-03-17 |
| CVE-2026-4295 | Kiro IDE 安全漏洞 — Kiro IDE CWE-829 | 7.8 | High | 2026-03-17 |
| CVE-2026-25771 | Wazuh 资源管理错误漏洞 — wazuh CWE-400 | 5.3 | Medium | 2026-03-17 |
| CVE-2026-32297 | ANGEET ES3 KVM 安全漏洞 — ES3 KVM CWE-306 | 7.5 | High | 2026-03-17 |
| CVE-2026-32296 | NanoKVM 安全漏洞 — NanoKVM CWE-306 | 8.2 | High | 2026-03-17 |
| CVE-2026-4318 | UTT HiPER 810G 安全漏洞 — HiPER 810G CWE-120 | 8.8 | High | 2026-03-17 |
| CVE-2026-4312 | DrangSoft GCB/FCB Audit Software 访问控制错误漏洞 — GCB/FCB Audit Software CWE-306 | 9.8 | Critical | 2026-03-17 |
| CVE-2026-2373 | WordPress plugin Royal Addons for Elementor 安全漏洞 — Royal Addons for Elementor – Addons and Templates Kit for Elementor CWE-862 | 5.3 | Medium | 2026-03-17 |
| CVE-2026-2579 | WordPress plugin WowStore SQL注入漏洞 — WowStore – Store Builder & Product Blocks for WooCommerce CWE-89 | 7.5 | High | 2026-03-17 |
| CVE-2026-29522 | ZwickRoell Test Data Management 路径遍历漏洞 — Test Data Management CWE-22 | 7.5AI | High AI | 2026-03-16 |
| CVE-2026-28430 | Chamilo LMS SQL注入漏洞 — chamilo-lms CWE-89 | 9.8AI | Critical AI | 2026-03-16 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24933 条 CVE 漏洞。