目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24921

access:pre-auth 类型相关 24921 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2022-40619 NETGEAR多款产品 安全漏洞 — n/a 8.8AI High AI 2026-01-28
CVE-2026-24748 kargo 安全漏洞 — kargo CWE-863 5.3AI Medium AI 2026-01-27
CVE-2026-23593 HPE Aruba Networking Fabric Composer 安全漏洞 — HPE Aruba Networking Fabric Composer 7.5 High 2026-01-27
CVE-2026-1315 TP-Link Tapo C220和TP-Link Tapo C520WS 安全漏洞 — Tapo C220 v1 CWE-20 6.5AI Medium AI 2026-01-27
CVE-2026-0919 TP-Link Tapo C220和TP-Link Tapo C520WS 安全漏洞 — Tapo C220 v1 CWE-20 7.5AI High AI 2026-01-27
CVE-2026-0918 TP-Link Tapo C220和TP-Link Tapo C520WS 安全漏洞 — Tapo C220 v1 CWE-476 7.5AI High AI 2026-01-27
CVE-2025-69418 OpenSSL 安全漏洞 — OpenSSL CWE-325 9.1AI Critical AI 2026-01-27
CVE-2025-15469 OpenSSL 安全漏洞 — OpenSSL CWE-347 9.1AI Critical AI 2026-01-27
CVE-2025-68670 xrdp 安全漏洞 — xrdp CWE-121 9.1 Critical 2026-01-27
CVE-2021-47900 Gila CMS 安全漏洞 — Gila CMS CWE-98 9.8 Critical 2026-01-27
CVE-2020-36939 Cassandra Web 路径遍历漏洞 — Cassandra Web CWE-22 7.5 High 2026-01-27
CVE-2025-12386 Pix-Link LV-WR21Q 访问控制错误漏洞 — LV-WR21Q CWE-306 7.5AI High AI 2026-01-27
CVE-2025-14971 WordPress plugin Link Invoice Payment for WooCommerce 安全漏洞 — Link Invoice Payment for WooCommerce CWE-862 5.3 Medium 2026-01-27
CVE-2026-24477 AnythingLLM 安全漏洞 — anything-llm CWE-201 9.1AI Critical AI 2026-01-26
CVE-2025-59472 Next.js 安全漏洞 — next 5.9 Medium 2026-01-26
CVE-2025-57785 Hiawatha 安全漏洞 — Hiawatha Web server 9.8AI Critical AI 2026-01-26
CVE-2025-57783 Hiawatha 安全漏洞 — Hiawatha Web server 8.2AI High AI 2026-01-26
CVE-2026-24656 Apache Karaf Decanter 安全漏洞 — Apache Karaf CWE-502 9.1AI Critical AI 2026-01-26
CVE-2025-6461 WordPress plugin CubeWP – All-in-One Dynamic Content Framework 信息泄露漏洞 — CubeWP Framework CWE-200 4.3 Medium 2026-01-25
CVE-2026-0862 WordPress plugin Save as PDF Plugin by PDFCrowd 跨站脚本漏洞 — Save as PDF Plugin by PDFCrowd CWE-79 6.1 Medium 2026-01-24
CVE-2025-13920 WordPress plugin WP Directory Kit 信息泄露漏洞 — WP Directory Kit CWE-200 5.3 Medium 2026-01-24
CVE-2026-1127 WordPress plugin Timeline Event History 跨站脚本漏洞 — Timeline Event History CWE-79 6.1 Medium 2026-01-24
CVE-2025-13205 WordPress plugin SurveyJS: Drag & Drop WordPress Form Builder 跨站请求伪造漏洞 — SurveyJS: Drag & Drop Form Builder CWE-352 4.3 Medium 2026-01-24
CVE-2025-13194 WordPress plugin SurveyJS: Drag & Drop WordPress Form Builder 跨站请求伪造漏洞 — SurveyJS: Drag & Drop Form Builder CWE-352 4.3 Medium 2026-01-24
CVE-2026-1208 WordPress plugin Friendly Functions for Welcart 跨站请求伪造漏洞 — Friendly Functions for Welcart CWE-352 4.3 Medium 2026-01-24
CVE-2025-13139 WordPress plugin SurveyJS: Drag & Drop WordPress Form Builder 跨站请求伪造漏洞 — SurveyJS: Drag & Drop Form Builder CWE-352 4.3 Medium 2026-01-24
CVE-2026-0633 WordPress plugin MetForm 授权问题漏洞 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor CWE-287 3.7 Low 2026-01-24
CVE-2025-14630 WordPress plugin AdminQuickbar 跨站请求伪造漏洞 — AdminQuickbar CWE-352 4.3 Medium 2026-01-24
CVE-2025-14907 WordPress plugin Moderate Selected Posts 跨站请求伪造漏洞 — Moderate Selected Posts CWE-352 4.3 Medium 2026-01-24
CVE-2026-0800 WordPress plugin User Submitted Posts 跨站脚本漏洞 — User Submitted Posts – Enable Users to Submit Posts from the Front End CWE-79 7.2 High 2026-01-24

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24921 条 CVE 漏洞。