access:pre-auth 类型相关 24923 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-50981 | Innomic VibroLine Series 访问控制错误漏洞 — VibroLine VLX1 HD 5.0 CWE-306 | 9.8 | Critical | 2026-02-02 |
| CVE-2022-50980 | Innomic VibroLine Series 访问控制错误漏洞 — VibroLine VLX1 HD 5.0 CWE-306 | 6.5 | Medium | 2026-02-02 |
| CVE-2022-50979 | Innomic VibroLine Series 访问控制错误漏洞 — VibroLine VLX1 HD 5.0 CWE-306 | 6.5 | Medium | 2026-02-02 |
| CVE-2022-50978 | Innomic VibroLine Series 访问控制错误漏洞 — VibroLine VLX1 HD 5.0 CWE-306 | 7.5 | High | 2026-02-02 |
| CVE-2022-50977 | Innomic VibroLine Series 访问控制错误漏洞 — VibroLine VLX1 HD 5.0 CWE-306 | 7.5 | High | 2026-02-02 |
| CVE-2022-50975 | Innomic VibroLine Series 访问控制错误漏洞 — VibroLine VLX1 HD 5.0 CWE-346 | 8.8 | High | 2026-02-02 |
| CVE-2026-1760 | libsoup 环境问题漏洞 — Red Hat Enterprise Linux 10 CWE-444 | 5.3 | Medium | 2026-02-02 |
| CVE-2026-0599 | Text Generation Inference 资源管理错误漏洞 — huggingface/text-generation-inference CWE-400 | 7.5AI | High AI | 2026-02-02 |
| CVE-2026-1117 | LoLLMs WEBUI 访问控制错误漏洞 — parisneo/lollms CWE-284 | 8.1AI | High AI | 2026-02-02 |
| CVE-2025-15030 | WordPress plugin User Profile Builder 安全漏洞 — User Profile Builder | 8.1AI | High AI | 2026-02-02 |
| CVE-2026-1746 | JeecgBoot SQL注入漏洞 — JeecgBoot CWE-89 | 6.3 | Medium | 2026-02-02 |
| CVE-2026-25201 | SAMSUNG MagicINFO 9 Server 安全漏洞 — MagicINFO 9 Server CWE-434 | 8.8 | High | 2026-02-02 |
| CVE-2026-25200 | SAMSUNG MagicINFO 9 Server 安全漏洞 — MagicINFO 9 Server CWE-434 | 9.8 | Critical | 2026-02-02 |
| CVE-2026-1742 | EFM ipTIME A8004T 代码问题漏洞 — ipTIME A8004T CWE-434 | 4.7 | Medium | 2026-02-02 |
| CVE-2026-1739 | free5GC 代码问题漏洞 — pcf CWE-476 | 5.3 | Medium | 2026-02-02 |
| CVE-2026-1738 | Open5GS 安全漏洞 — Open5GS CWE-617 | 5.3 | Medium | 2026-02-02 |
| CVE-2026-1736 | Open5GS 安全漏洞 — Open5GS CWE-617 | 5.3 | Medium | 2026-02-02 |
| CVE-2022-50950 | webileapps Webile 路径遍历漏洞 — Webile CWE-22 | 6.5 | Medium | 2026-02-01 |
| CVE-2026-25069 | Pironman Dashboard 安全漏洞 — Pironman Dashboard (pm_dashboard) CWE-22 | 9.8AI | Critical AI | 2026-01-31 |
| CVE-2026-1165 | WordPress plugin Popup Box 跨站请求伪造漏洞 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups CWE-352 | 4.3 | Medium | 2026-01-31 |
| CVE-2025-14554 | WordPress plugin Sell BTC - Cryptocurrency Selling Calculator 跨站脚本漏洞 — Sell BTC – Cryptocurrency Selling Calculator CWE-79 | 7.2 | High | 2026-01-31 |
| CVE-2025-15525 | WordPress plugin Ajax Load More – Infinite Scroll, Load More, & Lazy Load 安全漏洞 — Ajax Load More – Infinite Scroll, Load More, & Lazy Load CWE-863 | 5.3 | Medium | 2026-01-31 |
| CVE-2026-1431 | WordPress plugin Booking Calendar 安全漏洞 — Booking Calendar CWE-862 | 5.3 | Medium | 2026-01-31 |
| CVE-2025-15510 | WordPress plugin NEX-Forms – Ultimate Forms 安全漏洞 — NEX-Forms – Ultimate Forms Plugin for WordPress CWE-862 | 5.3 | Medium | 2026-01-31 |
| CVE-2020-37052 | Ubiquiti AirControl 代码注入漏洞 — AirControl CWE-94 | 9.8 | Critical | 2026-01-30 |
| CVE-2020-37041 | OpenCTI 路径遍历漏洞 — OpenCTI CWE-22 | 7.5 | High | 2026-01-30 |
| CVE-2020-37027 | Sick Beard 操作系统命令注入漏洞 — Sickbeard CWE-78 | 9.8 | Critical | 2026-01-30 |
| CVE-2026-1498 | WatchGuard Fireware OS 安全漏洞 — Fireware OS CWE-90 | 7.0 | High | 2026-01-30 |
| CVE-2025-51958 | runcommand 安全漏洞 — n/a | 9.8AI | Critical AI | 2026-01-30 |
| CVE-2026-25116 | Runtipi 访问控制错误漏洞 — runtipi CWE-22 | 7.6 | High | 2026-01-29 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24923 条 CVE 漏洞。