access:pre-auth 类型相关 24905 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-63951 | RPi-Jukebox-RFID 安全漏洞 — n/a | 9.8AI | Critical AI | 2025-12-18 |
| CVE-2025-65562 | free5GC 安全漏洞 — n/a | 7.5AI | High AI | 2025-12-18 |
| CVE-2023-53930 | ProjectSend 安全漏洞 — projectSend CWE-639 | 7.5 | High | 2025-12-17 |
| CVE-2023-53922 | TinyWebGallery 代码问题漏洞 — TinyWebGallery CWE-434 | 9.8 | Critical | 2025-12-17 |
| CVE-2023-53923 | UliCMS 安全漏洞 — Ulicms CWE-862 | 9.8 | Critical | 2025-12-17 |
| CVE-2023-53914 | UliCMS 安全漏洞 — Ulicms CWE-639 | 9.8 | Critical | 2025-12-17 |
| CVE-2025-68434 | Open Source Point of Sale 跨站请求伪造漏洞 — opensourcepos CWE-352 | 8.8 | High | 2025-12-17 |
| CVE-2025-43428 | Apple多款产品 安全漏洞 — iOS and iPadOS | 5.3AI | Medium AI | 2025-12-17 |
| CVE-2025-34434 | AVideo 访问控制错误漏洞 — AVideo CWE-306 | 9.1AI | Critical AI | 2025-12-17 |
| CVE-2025-34441 | AVideo 安全漏洞 — AVideo CWE-359 | 7.5AI | High AI | 2025-12-17 |
| CVE-2025-62521 | ChurchCRM 代码注入漏洞 — CRM CWE-94 | 10.0 | Critical | 2025-12-17 |
| CVE-2025-20393 | Cisco Secure Email和Cisco Secure Email and Web Manager 安全漏洞 — Cisco Secure Email CWE-20 | 10.0 | Critical | 2025-12-17 |
| CVE-2025-14399 | WordPress plugin Download Plugins and Themes in ZIP from Dashboard 跨站请求伪造漏洞 — Download Plugins and Themes in ZIP from Dashboard CWE-352 | 4.3 | Medium | 2025-12-17 |
| CVE-2025-11924 | WordPress plugin Ninja Forms 安全漏洞 — Ninja Forms – The Contact Form Builder That Grows With You CWE-639 | 7.5 | High | 2025-12-17 |
| CVE-2025-14061 | WordPress plugin WP Cookie Consent 安全漏洞 — Cookie Banner for GDPR / CCPA – WPLP Cookie Consent CWE-862 | 5.3 | Medium | 2025-12-17 |
| CVE-2025-14154 | WordPress plugin Better Messages 跨站脚本漏洞 — Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages CWE-79 | 6.1 | Medium | 2025-12-17 |
| CVE-2025-13861 | WordPress plugin HTML Forms 跨站脚本漏洞 — HTML Forms – Simple WordPress Forms Plugin CWE-79 | 6.1 | Medium | 2025-12-17 |
| CVE-2025-13880 | WordPress plugin WP Social Ninja 安全漏洞 — WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets CWE-862 | 6.5 | Medium | 2025-12-17 |
| CVE-2025-14304 | ASRock Motherboards 安全漏洞 — Intel 500 chipset motherboard CWE-693 | 6.8 | Medium | 2025-12-17 |
| CVE-2025-14303 | MSI Motherboards 安全漏洞 — Intel 600 chipset motherboard CWE-693 | 6.8 | Medium | 2025-12-17 |
| CVE-2025-14302 | GIGABYTE Chipsets 安全漏洞 — intel 600 chipset Motherboard CWE-693 | 6.8 | Medium | 2025-12-17 |
| CVE-2025-11009 | Mitsubishi Electric GT Designer3 安全漏洞 — GT Designer3 Version1 (GOT2000) CWE-312 | 5.1 | Medium | 2025-12-17 |
| CVE-2025-14701 | Crafty Controller 跨站脚本漏洞 — Crafty Controller CWE-79 | 7.1 | High | 2025-12-17 |
| CVE-2025-65855 | Netun Solutions HelpFlash IoT 安全漏洞 — n/a | 6.8AI | Medium AI | 2025-12-17 |
| CVE-2025-14466 | Güralp Systems 安全漏洞 — Fortimus Series CWE-770 | 5.3 | Medium | 2025-12-16 |
| CVE-2025-14553 | TP-LINK Tapo C210 安全漏洞 — TP-Link Tapo App CWE-200 | 7.3AI | High AI | 2025-12-16 |
| CVE-2025-68155 | Vite Plugin React 安全漏洞 — vite-plugin-react CWE-22 | 7.5 | High | 2025-12-16 |
| CVE-2023-53896 | D-Link DAP-1325 访问控制错误漏洞 — DAP-1325 CWE-306 | 7.5 | High | 2025-12-16 |
| CVE-2025-59935 | GLPI 跨站脚本漏洞 — glpi CWE-79 | 6.5 | Medium | 2025-12-16 |
| CVE-2025-14002 | WordPress plugin WPCOM Member 授权问题漏洞 — WPCOM Member CWE-287 | 8.1 | High | 2025-12-16 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24905 条 CVE 漏洞。