目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24931

access:pre-auth 类型相关 24931 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2026-1714 WordPress plugin ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution 注入漏洞 — ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin CWE-93 8.6 High 2026-02-18
CVE-2026-2576 WordPress plugin Business Directory Plugin – Easy Listing Directories SQL注入漏洞 — Business Directory Plugin – Easy Listing Directories for WordPress CWE-89 7.5 High 2026-02-18
CVE-2026-1277 WordPress plugin URL Shortify 输入验证错误漏洞 — URL Shortify – Simple and Easy URL Shortener CWE-601 4.7 Medium 2026-02-18
CVE-2026-1296 WordPress plugin Frontend Post Submission Manager Lite 输入验证错误漏洞 — Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin CWE-601 6.1 Medium 2026-02-18
CVE-2026-1931 WordPress plugin Rent Fetch 跨站脚本漏洞 — Rent Fetch CWE-79 7.2 High 2026-02-18
CVE-2025-12074 WordPress plugin Context Blog 信息泄露漏洞 — Context Blog CWE-200 5.3 Medium 2026-02-18
CVE-2025-70141 SourceCodester Customer Support System 安全漏洞 — n/a 9.8AI Critical AI 2026-02-18
CVE-2025-70148 CodeAstro Membership Management System 安全漏洞 — n/a 7.5 High 2026-02-18
CVE-2025-70150 CodeAstro Membership Management System 安全漏洞 — n/a 9.8 Critical 2026-02-18
CVE-2026-1670 Honeywell多款产品 访问控制错误漏洞 — I-HIB2PI-UL 2MP IP CWE-306 9.8 Critical 2026-02-17
CVE-2025-33135 IBM Financial Transaction Manager for ACH Services and Check Services for Multi-Platform 跨站脚本漏洞 — Financial Transaction Manager for ACH Services and Check Services for Multi-Platform CWE-79 6.1 Medium 2026-02-17
CVE-2026-23598 HPE Aruba Networking 5G Core server API 安全漏洞 — HPE Aruba Networking Private 5G Core 6.5 Medium 2026-02-17
CVE-2026-23597 HPE Aruba Networking 5G Core server API 安全漏洞 — HPE Aruba Networking Private 5G Core 6.5 Medium 2026-02-17
CVE-2026-23596 HPE Aruba Networking Private 5G Core 安全漏洞 — HPE Aruba Networking Private 5G Core 6.5 Medium 2026-02-17
CVE-2026-22769 Dell RecoverPoint for Virtual Machines 信任管理问题漏洞 — RecoverPoint for Virtual Machines CWE-798 10.0 Critical 2026-02-17
CVE-2023-38265 IBM Cloud Pak System 安全漏洞 — Cloud Pak System CWE-548 5.3 Medium 2026-02-17
CVE-2025-36019 IBM Concert 跨站脚本漏洞 — Concert CWE-79 6.1 Medium 2026-02-17
CVE-2026-1216 WordPress plugin RSS Aggregator 跨站脚本漏洞 — RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging CWE-79 7.2 High 2026-02-17
CVE-2026-0829 WordPress plugin Frontend File Manager Plugin 安全漏洞 — Frontend File Manager Plugin 6.5AI Medium AI 2026-02-17
CVE-2026-1657 WordPress plugin EventPrime 安全漏洞 — EventPrime – Events Calendar, Bookings and Tickets CWE-862 5.3 Medium 2026-02-17
CVE-2026-2592 WordPress plugin Zarinpal Gateway for WooCommerce 访问控制错误漏洞 — Zarinpal Gateway CWE-284 7.7 High 2026-02-17
CVE-2026-26220 LightLLM 代码问题漏洞 — LightLLM CWE-502 9.8AI Critical AI 2026-02-17
CVE-2019-25393 Smoothwall Express 跨站脚本漏洞 — Smoothwall Express CWE-79 6.1 Medium 2026-02-16
CVE-2019-25392 Smoothwall Express 跨站脚本漏洞 — Smoothwall Express CWE-79 6.1 Medium 2026-02-16
CVE-2019-25389 Smoothwall Express 跨站脚本漏洞 — Smoothwall Express CWE-79 6.1 Medium 2026-02-16
CVE-2019-25388 Smoothwall Express 跨站脚本漏洞 — Smoothwall Express CWE-79 6.1 Medium 2026-02-16
CVE-2019-25387 Smoothwall Express 跨站脚本漏洞 — Smoothwall Express CWE-79 6.1 Medium 2026-02-16
CVE-2019-25382 Smoothwall Express 安全漏洞 — Smoothwall Express CWE-79 6.1 Medium 2026-02-16
CVE-2026-2577 nanobot 安全漏洞 — nanobot CWE-306 10.0 Critical 2026-02-16
CVE-2026-2537 Comfast CF-E4 命令注入漏洞 — CF-E4 CWE-77 4.7 Medium 2026-02-16

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24931 条 CVE 漏洞。