目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24923

access:pre-auth 类型相关 24923 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2020-37125 Edimax EW-7438RPn-v3 Mini 操作系统命令注入漏洞 — EW-7438RPn Mini CWE-78 9.8 Critical 2026-02-05
CVE-2026-1294 WordPress plugin All In One Image Viewer Block 代码问题漏洞 — All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink CWE-918 7.2 High 2026-02-05
CVE-2026-1654 WordPress plugin Peter s Date Countdown 跨站脚本漏洞 — Peter’s Date Countdown CWE-79 6.1 Medium 2026-02-05
CVE-2025-15080 Mitsubishi Electric MELSEC iQ-R series 安全漏洞 — MELSEC iQ-R Series R08PCPU CWE-1284 9.8AI Critical AI 2026-02-05
CVE-2025-13192 WordPress plugin Popup builder with Gamification SQL注入漏洞 — Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers CWE-89 8.2 High 2026-02-04
CVE-2026-25575 NavigaTUM 安全漏洞 — NavigaTUM CWE-23 7.5AI High AI 2026-02-04
CVE-2026-1884 Nature Easy Soft Network Technology ZenTao 代码问题漏洞 — ZenTao CWE-918 4.7 Medium 2026-02-04
CVE-2025-13375 IBM Common Cryptographic Architecture 安全漏洞 — Common Cryptographic Architecture CWE-250 9.8 Critical 2026-02-04
CVE-2026-25139 RIOT 缓冲区错误漏洞 — RIOT CWE-125 9.1AI Critical AI 2026-02-04
CVE-2026-25055 n8n 路径遍历漏洞 — n8n CWE-22 10.0AI Critical AI 2026-02-04
CVE-2026-20119 Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software 安全漏洞 — Cisco RoomOS Software CWE-1287 7.5 High 2026-02-04
CVE-2026-20123 Cisco Evolved Programmable Network Manager和Cisco Prime Infrastructure 输入验证错误漏洞 — Cisco Evolved Programmable Network Manager (EPNM) CWE-601 4.3 Medium 2026-02-04
CVE-2026-20056 Cisco Secure Web Appliance 安全漏洞 — Cisco Secure Web Appliance CWE-494 4.0 Medium 2026-02-04
CVE-2026-24735 Apache Answer 安全漏洞 — Apache Answer CWE-359 5.3AI Medium AI 2026-02-04
CVE-2026-0679 WordPress plugin Fortis for WooCommerce 安全漏洞 — Fortis for WooCommerce CWE-862 5.3 Medium 2026-02-04
CVE-2025-15507 WordPress plugin Magic Import Document Extractor 安全漏洞 — Magic Import Document Extractor CWE-862 5.3 Medium 2026-02-04
CVE-2025-15508 WordPress plugin Magic Import Document Extractor 信息泄露漏洞 — Magic Import Document Extractor CWE-200 5.3 Medium 2026-02-04
CVE-2026-0572 WordPress plugin WebPurify Profanity Filter 安全漏洞 — WebPurify Profanity Filter CWE-862 6.5 Medium 2026-02-04
CVE-2025-15268 WordPress plugin Infility Global SQL注入漏洞 — Infility Global CWE-89 7.5 High 2026-02-04
CVE-2025-15285 WordPress plugin SEO Flow by LupsOnline 安全漏洞 — SEO Flow by LupsOnline CWE-862 7.5 High 2026-02-04
CVE-2025-14461 WordPress plugin Xendit Payment 安全漏洞 — Xendit Payment CWE-862 5.3 Medium 2026-02-04
CVE-2025-15482 WordPress plugin Chapa Payment Gateway Plugin for WooCommerce 信息泄露漏洞 — Chapa Payment Gateway Plugin for WooCommerce CWE-200 5.3 Medium 2026-02-04
CVE-2025-70545 PPC 2K05X 安全漏洞 — n/a 6.1AI Medium AI 2026-02-04
CVE-2026-1633 Synectix LAN 232 TRIO 访问控制错误漏洞 — LAN 232 TRIO CWE-306 10.0 Critical 2026-02-03
CVE-2026-1632 RISS SRL MOMA Seismic Station 访问控制错误漏洞 — MOMA Seismic Station CWE-306 9.1 Critical 2026-02-03
CVE-2020-37092 Netis E1+ 信任管理问题漏洞 — Netis E1+ CWE-798 7.5 High 2026-02-03
CVE-2020-37093 Netis E1+ 安全漏洞 — Netis E1+ CWE-201 7.5 High 2026-02-03
CVE-2020-37091 Maian Media Maian Support 跨站请求伪造漏洞 — Maian Support Helpdesk CWE-352 5.3 Medium 2026-02-03
CVE-2020-37088 Arox School ERP Pro 路径遍历漏洞 — School ERP Pro CWE-22 7.5 High 2026-02-03
CVE-2020-37086 Rubikon Easy Transfer 路径遍历漏洞 — Easy Transfer CWE-22 6.2 Medium 2026-02-03

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24923 条 CVE 漏洞。