access:pre-auth 类型相关 24931 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-3268 | PSI Probe 访问控制错误漏洞 — PSI Probe CWE-284 | 5.4 | Medium | 2026-02-26 |
| CVE-2026-28276 | Initiative 安全漏洞 — initiative CWE-200 | 7.5 | High | 2026-02-26 |
| CVE-2026-28230 | SteVe 访问控制错误漏洞 — steve CWE-284 | 5.7AI | Medium AI | 2026-02-26 |
| CVE-2026-28215 | Hoppscotch 授权问题漏洞 — hoppscotch CWE-284 | 9.1 | Critical | 2026-02-26 |
| CVE-2026-27449 | Umbraco Engage 安全漏洞 — Umbraco.Engage.Forms CWE-284 | 7.5 | High | 2026-02-26 |
| CVE-2026-22207 | OpenViking 访问控制错误漏洞 — OpenViking CWE-306 | 9.8 | Critical | 2026-02-26 |
| CVE-2026-22205 | SPIP 安全漏洞 — SPIP CWE-288 | 7.5 | High | 2026-02-26 |
| CVE-2026-27509 | Unitree Go2 访问控制错误漏洞 — Unitree Go2 CWE-306 | 8.0 | High | 2026-02-26 |
| CVE-2026-23750 | pouch 安全漏洞 — Pouch CWE-122 | 8.1 | High | 2026-02-26 |
| CVE-2026-26077 | Discourse 授权问题漏洞 — discourse CWE-287 | 6.5 | Medium | 2026-02-26 |
| CVE-2026-24004 | Fleet 安全漏洞 — fleet CWE-862 | 8.2AI | High AI | 2026-02-26 |
| CVE-2026-27975 | ajenti 访问控制错误漏洞 — ajenti CWE-284 | 9.8AI | Critical AI | 2026-02-26 |
| CVE-2026-1779 | WordPress plugin User Registration & Membership 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-288 | 8.1 | High | 2026-02-26 |
| CVE-2026-2356 | WordPress plugin User Registration & Membership 访问控制错误漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-284 | 5.3 | Medium | 2026-02-26 |
| CVE-2026-1557 | WordPress plugin WP Responsive Images 路径遍历漏洞 — WP Responsive Images CWE-22 | 7.5 | High | 2026-02-26 |
| CVE-2026-2506 | WordPress plugin EM Cost Calculator 跨站脚本漏洞 — EM Cost Calculator CWE-79 | 6.1 | Medium | 2026-02-26 |
| CVE-2026-27903 | minimatch 安全漏洞 — minimatch CWE-407 | 7.5 | High | 2026-02-26 |
| CVE-2026-27804 | Parse Server 数据伪造问题漏洞 — parse-server CWE-327 | 9.8AI | Critical AI | 2026-02-25 |
| CVE-2026-27633 | TinyWeb 资源管理错误漏洞 — TinyWeb CWE-400 | 7.5AI | High AI | 2026-02-25 |
| CVE-2026-27630 | TinyWeb 资源管理错误漏洞 — TinyWeb CWE-400 | 7.5AI | High AI | 2026-02-25 |
| CVE-2026-27613 | TinyWeb 参数注入漏洞 — TinyWeb CWE-78 | 9.8AI | Critical AI | 2026-02-25 |
| CVE-2026-27493 | n8n 安全漏洞 — n8n CWE-94 | 9.8AI | Critical AI | 2026-02-25 |
| CVE-2026-27148 | Storybook 跨站脚本漏洞 — storybook CWE-74 | 8.1AI | High AI | 2026-02-25 |
| CVE-2026-0542 | ServiceNow AI Platform 安全漏洞 — ServiceNow AI Platform CWE-653 | 9.8AI | Critical AI | 2026-02-25 |
| CVE-2025-14511 | GitLab 安全漏洞 — GitLab CWE-1284 | 7.5 | High | 2026-02-25 |
| CVE-2026-0752 | GitLab CE/EE 跨站脚本漏洞 — GitLab CWE-79 | 8.0 | High | 2026-02-25 |
| CVE-2026-1388 | GitLab CE/EE 安全漏洞 — GitLab CWE-1333 | 7.5 | High | 2026-02-25 |
| CVE-2026-1662 | GitLab CE/EE 安全漏洞 — GitLab CWE-770 | 7.5 | High | 2026-02-25 |
| CVE-2026-1725 | GitLab CE/EE 安全漏洞 — GitLab CWE-770 | 5.3 | Medium | 2026-02-25 |
| CVE-2026-25138 | Rucio 安全漏洞 — rucio CWE-204 | 5.3 | Medium | 2026-02-25 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24931 条 CVE 漏洞。