access:pre-auth 类型相关 24905 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-21445 | Langflow 访问控制错误漏洞 — langflow CWE-306 | 9.4 | - | 2026-01-02 |
| CVE-2025-14072 | WordPress plugin Ninja Forms 安全漏洞 — Ninja Forms | 5.3 | - | 2026-01-02 |
| CVE-2025-12685 | WordPress plugin WPBookit 安全漏洞 — WPBookit | 4.3 | - | 2026-01-02 |
| CVE-2025-14047 | WordPress plugin WP User Frontend 安全漏洞 — User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration CWE-862 | 5.3 | Medium | 2026-01-02 |
| CVE-2025-14998 | WordPress plugin Branda 安全漏洞 — Branda – White Label & Branding, Free Login Page Customizer CWE-639 | 9.8 | Critical | 2026-01-02 |
| CVE-2025-68620 | Signal K Server 安全漏洞 — signalk-server CWE-288 | 9.1 | Critical | 2026-01-01 |
| CVE-2025-68273 | Signal K Server 信息泄露漏洞 — signalk-server CWE-200 | 5.3 | Medium | 2026-01-01 |
| CVE-2025-68272 | Signal K Server 安全漏洞 — signalk-server CWE-400 | 7.5 | High | 2026-01-01 |
| CVE-2025-66398 | Signal K Server 安全漏洞 — signalk-server CWE-78 | 9.7 | Critical | 2026-01-01 |
| CVE-2025-67711 | Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 | 6.1 | Medium | 2025-12-31 |
| CVE-2025-67710 | Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 | 6.1 | Medium | 2025-12-31 |
| CVE-2025-67709 | Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 | 6.1 | Medium | 2025-12-31 |
| CVE-2025-67708 | Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 | 6.1 | Medium | 2025-12-31 |
| CVE-2025-67707 | Esri ArcGIS Server 代码问题漏洞 — ArcGIS Server CWE-434 | 5.6 | Medium | 2025-12-31 |
| CVE-2025-67706 | Esri ArcGIS Server 代码问题漏洞 — ArcGIS Server CWE-434 | 5.6 | Medium | 2025-12-31 |
| CVE-2025-67705 | Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 | 6.1 | Medium | 2025-12-31 |
| CVE-2025-67704 | Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 | 6.1 | Medium | 2025-12-31 |
| CVE-2025-67703 | Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 | 6.1 | Medium | 2025-12-31 |
| CVE-2025-34469 | Cowrie 安全漏洞 — Cowrie CWE-918 | 7.5 | - | 2025-12-31 |
| CVE-2021-47743 | COMMAX Biometric Access Control System 跨站脚本漏洞 — COMMAX Biometric Access Control System CWE-79 | 6.1 | Medium | 2025-12-31 |
| CVE-2025-15393 | KodiCMS 代码注入漏洞 — KodiCMS CWE-94 | 6.3 | Medium | 2025-12-31 |
| CVE-2025-62755 | WordPress plugin GS Portfolio for Envato 安全漏洞 — GS Portfolio for Envato CWE-862 | 5.3 | Medium | 2025-12-31 |
| CVE-2025-15387 | QNO VPN Firewall 安全特征问题漏洞 — VPN Firewall CWE-331 | 8.8 | High | 2025-12-31 |
| CVE-2025-15017 | Moxa NPort 5000 Series 安全漏洞 — NPort 5000AI-M12 Series CWE-489 | 7.6 | - | 2025-12-31 |
| CVE-2025-14783 | WordPress plugin Easy Digital Downloads 授权问题漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easy CWE-640 | 4.3 | Medium | 2025-12-31 |
| CVE-2025-14434 | WordPress plugin Ultimate Post Kit Addons for Elementor 安全漏洞 — Ultimate Post Kit Addons for Elementor | 5.3 | - | 2025-12-31 |
| CVE-2025-13029 | WordPress plugin Knowband Mobile App Builder 安全漏洞 — Knowband Mobile App Builder | 7.5 | - | 2025-12-31 |
| CVE-2022-50802 | ETAP Safety Manager 跨站脚本漏洞 — ETAP Safety Manager CWE-79 | 6.1 | Medium | 2025-12-30 |
| CVE-2024-58336 | Akuvox S539 访问控制错误漏洞 — Akuvox Smart Doorphone CWE-306 | 5.3 | Medium | 2025-12-30 |
| CVE-2023-54327 | Tinycontrol LAN Controller 安全漏洞 — LAN Controller CWE-862 | 9.8 | Critical | 2025-12-30 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24905 条 CVE 漏洞。