access:pre-auth 类型相关 24933 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-3560 | Philips Hue Bridge 安全漏洞 — Hue Bridge CWE-122 | 8.8AI | High AI | 2026-03-13 |
| CVE-2026-32617 | AnythingLLM 安全漏洞 — anything-llm CWE-942 | 7.1 | High | 2026-03-13 |
| CVE-2026-32314 | Yamux 安全漏洞 — rust-yamux CWE-248 | 7.5AI | High AI | 2026-03-13 |
| CVE-2026-31882 | dagu 访问控制错误漏洞 — dagu CWE-306 | 7.5 | High | 2026-03-13 |
| CVE-2026-1668 | TP-Link Omada Switches 安全漏洞 — SG2008P 3.2x CWE-20 | 9.8 | - | 2026-03-13 |
| CVE-2026-2859 | Checkmk 安全漏洞 — Checkmk CWE-204 | 5.3 | - | 2026-03-13 |
| CVE-2026-23943 | Erlang/OTP 安全漏洞 — OTP CWE-409 | 6.9 | Medium | 2026-03-13 |
| CVE-2026-2888 | WordPress plugin Formidable Forms 安全漏洞 — Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder CWE-639 | 5.3 | Medium | 2026-03-13 |
| CVE-2026-2890 | WordPress plugin Formidable Forms 安全漏洞 — Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder CWE-862 | 7.5 | High | 2026-03-13 |
| CVE-2026-3045 | WordPress plugin Appointment Booking Calendar — Simply Schedule Appointments 安全漏洞 — Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin CWE-862 | 7.5 | High | 2026-03-13 |
| CVE-2026-3891 | WordPress plugin Pix for WooCommerce 代码问题漏洞 — Pix for WooCommerce CWE-434 | 9.8 | Critical | 2026-03-13 |
| CVE-2026-22216 | WordPress plugin wpDiscuz 安全漏洞 — wpDiscuz CWE-799 | 6.5 | Medium | 2026-03-13 |
| CVE-2026-22199 | WordPress plugin wpDiscuz 安全漏洞 — SNMP Web Pro CWE-22 | 7.5 | High | 2026-03-13 |
| CVE-2026-22192 | WordPress plugin wpDiscuz 跨站脚本漏洞 — SNMP Web Pro CWE-306 | 9.9 | Critical | 2026-03-13 |
| CVE-2026-22182 | WordPress plugin wpDiscuz 安全漏洞 — wpDiscuz CWE-862 | 7.5 | High | 2026-03-13 |
| CVE-2026-32319 | Ella Core 缓冲区错误漏洞 — core CWE-125 | 7.5 | High | 2026-03-12 |
| CVE-2026-32301 | centrifugo 代码问题漏洞 — centrifugo CWE-918 | 9.3 | Critical | 2026-03-12 |
| CVE-2026-3611 | Honeywell IQ4x 访问控制错误漏洞 — IQ4E CWE-306 | 10.0 | Critical | 2026-03-12 |
| CVE-2026-32248 | Parse Server 安全漏洞 — parse-server CWE-943 | 7.4AI | High AI | 2026-03-12 |
| CVE-2026-32138 | NEXULEAN 信任管理问题漏洞 — website CWE-284 | 8.2 | High | 2026-03-12 |
| CVE-2026-32230 | Uptime Kuma 安全漏洞 — uptime-kuma CWE-862 | 5.3 | Medium | 2026-03-12 |
| CVE-2026-28254 | Trane多款产品 安全漏洞 — Tracer SC CWE-862 | 7.5AI | High AI | 2026-03-12 |
| CVE-2026-28253 | Trane多款产品 安全漏洞 — Tracer SC CWE-789 | 7.5AI | High AI | 2026-03-12 |
| CVE-2026-29066 | TinaCMS 安全漏洞 — cli CWE-552 | 6.2 | Medium | 2026-03-12 |
| CVE-2019-25542 | Netartmedia Real Estate Portal SQL注入漏洞 — Netartmedia Real Estate Portal CWE-89 | 8.2 | High | 2026-03-12 |
| CVE-2019-25543 | Netartmedia Real Estate Portal SQL注入漏洞 — Netartmedia Real Estate Portal CWE-89 | 8.2 | High | 2026-03-12 |
| CVE-2019-25541 | Netartmedia PHP Mall SQL注入漏洞 — Netartmedia PHP Mall CWE-89 | 8.2 | High | 2026-03-12 |
| CVE-2019-25540 | Netartmedia PHP Mall SQL注入漏洞 — Netartmedia PHP Mall CWE-89 | 8.2 | High | 2026-03-12 |
| CVE-2019-25539 | 202CMS SQL注入漏洞 — 202CMS CWE-89 | 8.2 | High | 2026-03-12 |
| CVE-2019-25538 | 202CMS SQL注入漏洞 — 202CMS CWE-89 | 8.2 | High | 2026-03-12 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24933 条 CVE 漏洞。