access:pre-auth 类型相关 24923 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-37082 | webERP 安全漏洞 — webERP CWE-552 | 9.8 | Critical | 2026-02-03 |
| CVE-2020-37080 | webTareas 安全漏洞 — webTareas CWE-73 | 9.8 | Critical | 2026-02-03 |
| CVE-2020-37071 | CraftCMS 3 vCard Plugin 代码问题漏洞 — CraftCMS CWE-502 | 9.8 | Critical | 2026-02-03 |
| CVE-2026-25509 | CI4MS 安全漏洞 — ci4ms CWE-204 | 5.3 | Medium | 2026-02-03 |
| CVE-2026-25150 | Qwik 安全漏洞 — qwik CWE-1321 | 9.3 | Critical | 2026-02-03 |
| CVE-2026-1801 | libsoup 环境问题漏洞 — Red Hat Enterprise Linux 10 CWE-444 | 5.3 | Medium | 2026-02-03 |
| CVE-2025-64438 | eProsima Fast DDS 安全漏洞 — Fast-DDS CWE-835 | 7.5AI | High AI | 2026-02-03 |
| CVE-2025-62602 | Fast-DDS 安全漏洞 — Fast-DDS CWE-122 | 7.5AI | High AI | 2026-02-03 |
| CVE-2026-25241 | pearweb SQL注入漏洞 — pearweb CWE-89 | 9.8AI | Critical AI | 2026-02-03 |
| CVE-2026-24773 | Open eClass 安全漏洞 — openeclass CWE-639 | 7.5 | High | 2026-02-03 |
| CVE-2026-24664 | Open eClass 安全漏洞 — openeclass CWE-204 | 5.3 | Medium | 2026-02-03 |
| CVE-2020-37114 | GUnet OpenEclass 信息泄露漏洞 — GUnet OpenEclass CWE-200 | 4.3 | Medium | 2026-02-03 |
| CVE-2026-1447 | WordPress plugin Mail Mint 跨站请求伪造漏洞 — Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails CWE-352 | 5.4 | Medium | 2026-02-03 |
| CVE-2026-1058 | WordPress plugin Form Maker 跨站脚本漏洞 — Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder CWE-79 | 7.1 | High | 2026-02-03 |
| CVE-2026-1065 | WordPress plugin Form Maker by 10Web 代码问题漏洞 — Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder CWE-434 | 7.2 | High | 2026-02-03 |
| CVE-2026-0617 | WordPress plugin LatePoint 跨站脚本漏洞 — LatePoint – Calendar Booking Plugin for Appointments and Events CWE-79 | 7.2 | High | 2026-02-03 |
| CVE-2026-0950 | WordPress plugin Spectra Gutenberg Blocks 信息泄露漏洞 — Spectra Gutenberg Blocks – Website Builder for the Block Editor CWE-200 | 5.3 | Medium | 2026-02-03 |
| CVE-2026-24936 | ASUSTOR ADM 安全漏洞 — ADM CWE-20 | 9.8AI | Critical AI | 2026-02-03 |
| CVE-2026-24934 | ASUSTOR ADM 安全漏洞 — ADM CWE-295 | 3.7AI | Low AI | 2026-02-03 |
| CVE-2026-24933 | ASUSTOR ADM 安全漏洞 — ADM CWE-295 | 5.9AI | Medium AI | 2026-02-03 |
| CVE-2025-57529 | YouDataSum CPAS Audit Management System 安全漏洞 — n/a | 9.8AI | Critical AI | 2026-02-03 |
| CVE-2025-61506 | MediaCrush 安全漏洞 — n/a | 9.1AI | Critical AI | 2026-02-03 |
| CVE-2025-69970 | FUXA 安全漏洞 — n/a | 9.8AI | Critical AI | 2026-02-03 |
| CVE-2025-69981 | FUXA 安全漏洞 — n/a | 9.8AI | Critical AI | 2026-02-03 |
| CVE-2025-70758 | Core PHP Admin panel 安全漏洞 — n/a | 8.2AI | High AI | 2026-02-03 |
| CVE-2025-70841 | Dokans 安全漏洞 — n/a | 10.0 | Critical | 2026-02-03 |
| CVE-2025-70849 | podinfo 安全漏洞 — n/a | 8.2AI | High AI | 2026-02-03 |
| CVE-2025-10878 | Fikir Odalari AdminPando SQL注入漏洞 — Fikir Odalari AdminPando CWE-89 | 10.0 | Critical | 2026-02-03 |
| CVE-2026-25222 | PolarLearn 信息泄露漏洞 — PolarLearn CWE-200 | 3.7AI | Low AI | 2026-02-02 |
| CVE-2026-23515 | Signal K Server 操作系统命令注入漏洞 — signalk-server CWE-78 | 10.0 | Critical | 2026-02-02 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24923 条 CVE 漏洞。