access:pre-auth 类型相关 24931 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-1775 | Labkotec LID-3300IP 访问控制错误漏洞 — LID-3300IP CWE-306 | 9.8AI | Critical AI | 2026-03-03 |
| CVE-2026-2568 | WordPress plugin WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms 跨站脚本漏洞 — WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms CWE-79 | 7.2 | High | 2026-03-03 |
| CVE-2026-1492 | WordPress plugin User Registration & Membership 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-269 | 9.8 | Critical | 2026-03-03 |
| CVE-2026-2628 | WordPress plugin All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login 安全漏洞 — All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login CWE-288 | 9.8 | Critical | 2026-03-03 |
| CVE-2024-55019 | Weintek cMT 安全漏洞 — n/a | 7.5AI | High AI | 2026-03-03 |
| CVE-2026-1336 | WordPress plugin AI ChatBot with ChatGPT and Content Generator by AYS 安全漏洞 — AI ChatBot with ChatGPT and Content Generator by AYS CWE-862 | 5.3 | Medium | 2026-03-02 |
| CVE-2026-3338 | AWS libcrypto 安全漏洞 — AWS-LC CWE-347 | 7.5 | High | 2026-03-02 |
| CVE-2026-3337 | AWS libcrypto 安全漏洞 — AWS-LC CWE-208 | 5.9 | Medium | 2026-03-02 |
| CVE-2026-3336 | AWS libcrypto 安全漏洞 — AWS-LC CWE-295 | 7.5 | High | 2026-03-02 |
| CVE-2026-3180 | WordPress plugin Contest Gallery SQL注入漏洞 — Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe CWE-89 | 7.5 | High | 2026-03-02 |
| CVE-2024-50337 | Chamilo 代码问题漏洞 — chamilo-lms CWE-918 | 5.3 | Medium | 2026-03-02 |
| CVE-2026-3432 | Sim Studio 安全漏洞 — sim CWE-862 | 7.5AI | High AI | 2026-03-02 |
| CVE-2026-3431 | Sim Studio 安全漏洞 — sim CWE-862 | 9.8 | Critical | 2026-03-02 |
| CVE-2025-14532 | Studio Fabryka DobryCMS 代码问题漏洞 — DobryCMS CWE-434 | 9.8AI | Critical AI | 2026-03-02 |
| CVE-2025-12462 | Studio Fabryka DobryCMS SQL注入漏洞 — DobryCMS CWE-89 | 9.8AI | Critical AI | 2026-03-02 |
| CVE-2026-2584 | Ciser System CSIP firmware SQL注入漏洞 — CSIP firmware CWE-89 | 5.3AI | Medium AI | 2026-03-02 |
| CVE-2026-3422 | e-Excellence U-Office Force 代码问题漏洞 — U-Office Force CWE-502 | 9.8 | Critical | 2026-03-02 |
| CVE-2026-3000 | Changing IDExpert Windows Logon Agent 安全漏洞 — IDExpert Windows Logon Agent CWE-494 | 9.8 | Critical | 2026-03-02 |
| CVE-2026-2999 | Changing IDExpert Windows Logon Agent 安全漏洞 — IDExpert Windows Logon Agent CWE-494 | 9.8 | Critical | 2026-03-02 |
| CVE-2026-3378 | Tenda F453 安全漏洞 — F453 CWE-120 | 8.8 | High | 2026-03-01 |
| CVE-2026-28562 | WordPress plugin wpForo Forums SQL注入漏洞 — wpForo Forum CWE-89 | 8.2 | High | 2026-02-28 |
| CVE-2026-28559 | WordPress plugin wpForo Forum 信息泄露漏洞 — wpForo Forum CWE-200 | 5.3 | Medium | 2026-02-28 |
| CVE-2025-13673 | WordPress plugin Tutor LMS SQL注入漏洞 — Tutor LMS – eLearning and online course solution CWE-89 | 7.5 | High | 2026-02-28 |
| CVE-2026-2471 | WordPress plugin WP Mail Logging 代码问题漏洞 — WP Mail Logging CWE-502 | 7.5 | High | 2026-02-28 |
| CVE-2026-1542 | WordPress plugin Super Stage WP 安全漏洞 — Super Stage WP | 9.8 | - | 2026-02-28 |
| CVE-2026-28423 | cms 代码问题漏洞 — cms CWE-918 | 6.8 | Medium | 2026-02-27 |
| CVE-2026-28515 | openDCIM 安全漏洞 — openDCIM CWE-862 | 8.8 | - | 2026-02-27 |
| CVE-2026-28411 | WeGIA 安全漏洞 — WeGIA CWE-288 | 9.8 | Critical | 2026-02-27 |
| CVE-2026-28414 | Gradio 安全漏洞 — gradio CWE-36 | 7.5 | High | 2026-02-27 |
| CVE-2026-28400 | Docker Model Runner 安全漏洞 — model-runner CWE-749 | 7.6 | High | 2026-02-27 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24931 条 CVE 漏洞。