access:pre-auth 类型相关 24905 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-8065 | TP-Link Tapo C200 安全漏洞 — Tapo C200 V3 CWE-121 | 6.5AI | Medium AI | 2025-12-20 |
| CVE-2025-67712 | Esri ArcGIS Web AppBuilder 跨站脚本漏洞 — ArcGIS Web AppBuilder {Developer Edition) CWE-79 | 4.7 | Medium | 2025-12-19 |
| CVE-2023-30971 | Palantir Gaia 安全漏洞 — com.palantir.acme.gaia:gaia CWE-592 | 6.8 | Medium | 2025-12-19 |
| CVE-2025-34433 | AVideo 安全漏洞 — AVideo CWE-94 | 9.8AI | Critical AI | 2025-12-19 |
| CVE-2025-14847 | MongoDB Server 安全漏洞 — MongoDB Server CWE-130 | 7.5 | High | 2025-12-19 |
| CVE-2025-14151 | WordPress plugin SlimStat Analytics 跨站脚本漏洞 — SlimStat Analytics CWE-79 | 7.2 | High | 2025-12-19 |
| CVE-2025-13999 | WordPress plugin HTML5 Audio Player 代码问题漏洞 — HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player CWE-918 | 7.2 | High | 2025-12-19 |
| CVE-2025-13754 | WordPress plugin Appointment Booking Calendar 安全漏洞 — Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin CWE-862 | 5.3 | Medium | 2025-12-19 |
| CVE-2025-14910 | Edimax BR-6208AC 路径遍历漏洞 — BR-6208AC CWE-22 | 4.3 | Medium | 2025-12-19 |
| CVE-2025-14733 | WatchGuard Fireware OS 安全漏洞 — Fireware OS CWE-787 | 9.3 | Critical | 2025-12-19 |
| CVE-2025-66909 | turms 安全漏洞 — n/a | 7.5AI | High AI | 2025-12-19 |
| CVE-2025-68387 | Elastic Kibana 安全漏洞 — Kibana CWE-79 | 6.1 | Medium | 2025-12-18 |
| CVE-2025-13427 | Google Cloud Dialogflow CX Messenger 安全漏洞 — Dialogflow CX Messenger CWE-287 | 9.1AI | Critical AI | 2025-12-18 |
| CVE-2025-68382 | Elastic Packetbeat 安全漏洞 — Packetbeat CWE-125 | 6.5 | Medium | 2025-12-18 |
| CVE-2025-68381 | Elastic Packetbeat 安全漏洞 — Packetbeat CWE-787 | 6.5 | Medium | 2025-12-18 |
| CVE-2025-68388 | Elastic Packetbeat 安全漏洞 — Packetbeat CWE-770 | 5.3 | Medium | 2025-12-18 |
| CVE-2023-53941 | EasyPHP Webserver 操作系统命令注入漏洞 — EasyPHP Webserver CWE-78 | 9.8 | Critical | 2025-12-18 |
| CVE-2025-14739 | TP-Link WR940N 安全漏洞 — WR940N and WR941ND CWE-824 | 8.4AI | High AI | 2025-12-18 |
| CVE-2025-14738 | TP-Link WA850RE 安全漏洞 — WA850RE CWE-287 | 7.5AI | High AI | 2025-12-18 |
| CVE-2025-14823 | ConnectWise ScreenConnect 安全漏洞 — ScreenConnect CWE-201 | 5.3 | Medium | 2025-12-18 |
| CVE-2025-65007 | WODESYS WD-R608U 访问控制错误漏洞 — WD-R608U CWE-306 | 9.8AI | Critical AI | 2025-12-18 |
| CVE-2025-40893 | Nozomi Networks Guardian 跨站脚本漏洞 — Guardian CWE-79 | 6.1 | Medium | 2025-12-18 |
| CVE-2025-40891 | Nozomi Networks Guardian 跨站脚本漏洞 — Guardian CWE-79 | 4.7 | Medium | 2025-12-18 |
| CVE-2025-14437 | WordPress plugin Hummingbird Performance 日志信息泄露漏洞 — Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN CWE-532 | 7.5 | High | 2025-12-18 |
| CVE-2025-64373 | WordPress plugin Traveler 安全漏洞 — Traveler CWE-98 | 8.1 | High | 2025-12-18 |
| CVE-2025-47372 | Qualcomm Chipsets 安全漏洞 — Snapdragon CWE-120 | 9.0 | Critical | 2025-12-18 |
| CVE-2025-63387 | dify 安全漏洞 — n/a | 7.5AI | High AI | 2025-12-18 |
| CVE-2025-63388 | dify 安全漏洞 — n/a | 7.4AI | High AI | 2025-12-18 |
| CVE-2025-63390 | AnythingLLM 安全漏洞 — n/a | 5.3AI | Medium AI | 2025-12-18 |
| CVE-2025-63950 | twittodon 安全漏洞 — n/a | 7.5AI | High AI | 2025-12-18 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24905 条 CVE 漏洞。