access:pre-auth 类型相关 24904 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-67494 | ZITADEL 代码问题漏洞 — zitadel CWE-918 | 9.3 | Critical | 2025-12-09 |
| CVE-2023-53773 | MiniDVBLinux 访问控制错误漏洞 — MiniDVBLinux CWE-306 | 6.5AI | Medium AI | 2025-12-09 |
| CVE-2023-53771 | MiniDVBLinux 访问控制错误漏洞 — MiniDVBLinux Change Root Password PoC CWE-306 | 9.8AI | Critical AI | 2025-12-09 |
| CVE-2023-53770 | MiniDVBLinux 安全漏洞 — MiniDVBLinux(TM) Distribution (MLD) CWE-260 | 8.7 | High | 2025-12-09 |
| CVE-2023-53739 | Tinycontrol LAN Controller 安全漏洞 — Tinycontrol LAN Controller v CWE-260 | 9.9 | Critical | 2025-12-09 |
| CVE-2021-47730 | Selea Targa IP OCR-ANPR Camera 信任管理问题漏洞 — Selea Targa IP OCR-ANPR Camera CWE-352 | 8.8AI | High AI | 2025-12-09 |
| CVE-2021-47728 | Selea Targa IP OCR-ANPR Camera 操作系统命令注入漏洞 — Selea Targa IP OCR-ANPR Camera CWE-78 | 9.8AI | Critical AI | 2025-12-09 |
| CVE-2021-47727 | Selea Targa IP OCR-ANPR Camera 访问控制错误漏洞 — Selea Targa IP OCR-ANPR Camera CWE-306 | 7.5AI | High AI | 2025-12-09 |
| CVE-2021-47718 | OpenBMCS 安全漏洞 — OpenBMCS CWE-548 | 7.5AI | High AI | 2025-12-09 |
| CVE-2021-47710 | COMMAX Smart Home System 访问控制错误漏洞 — Smart Home Ruvie CCTV Bridge DVR Service CWE-306 | 7.5AI | High AI | 2025-12-09 |
| CVE-2021-47709 | COMMAX Smart Home System 访问控制错误漏洞 — Smart Home Ruvie CCTV Bridge DVR Service CWE-306 | 9.1AI | Critical AI | 2025-12-09 |
| CVE-2021-47706 | COMMAX Biometric Access Control System 安全漏洞 — COMMAX Biometric Access Control System CWE-565 | 7.5AI | High AI | 2025-12-09 |
| CVE-2021-47703 | OpenBMCS 代码问题漏洞 — OpenBMCS CWE-918 | 6.5AI | Medium AI | 2025-12-09 |
| CVE-2025-34414 | Entrust Instant Financial Issuance 代码问题漏洞 — Instant Financial Issuance (IF) CWE-502 | 9.1AI | Critical AI | 2025-12-09 |
| CVE-2025-13924 | WordPress plugin Advanced Product Fields (Product Addons) for WooCommerce 跨站请求伪造漏洞 — Advanced Product Fields (Product Addons) for WooCommerce CWE-352 | 4.3 | Medium | 2025-12-09 |
| CVE-2025-59718 | Fortinet多款产品 数据伪造问题漏洞 — FortiSwitchManager CWE-347 | 9.1 | Critical | 2025-12-09 |
| CVE-2025-59719 | Fortinet FortiWeb 数据伪造问题漏洞 — FortiWeb CWE-347 | 9.1 | Critical | 2025-12-09 |
| CVE-2025-64471 | Fortinet FortiWeb 安全漏洞 — FortiWeb CWE-836 | 4.4 | Medium | 2025-12-09 |
| CVE-2025-64447 | Fortinet FortiWeb 安全漏洞 — FortiWeb CWE-565 | 7.1 | High | 2025-12-09 |
| CVE-2025-13662 | Ivanti Endpoint Manager 数据伪造问题漏洞 — Endpoint Manager CWE-347 | 7.8 | High | 2025-12-09 |
| CVE-2025-13659 | Ivanti Endpoint Manager 安全漏洞 — Endpoint Manager CWE-913 | 8.8 | High | 2025-12-09 |
| CVE-2025-10573 | Ivanti Endpoint Manager 跨站脚本漏洞 — Endpoint Manager CWE-79 | 9.6 | Critical | 2025-12-09 |
| CVE-2025-12705 | WordPress plugin Social Reviews Recommendations 跨站脚本漏洞 — Reviews Widgets for Google, Yelp & TripAdvisor CWE-79 | 7.2 | High | 2025-12-09 |
| CVE-2025-40939 | Siemens SIMATIC CN 4100 访问控制错误漏洞 — SIMATIC CN 4100 CWE-284 | 4.6 | Medium | 2025-12-09 |
| CVE-2025-40820 | Siemens多款产品 安全漏洞 — SIDOOR ATD430W CWE-940 | 7.5 | High | 2025-12-09 |
| CVE-2025-40806 | Siemens Gridscale X Prepay 安全漏洞 — Gridscale X Prepay CWE-204 | 5.3 | Medium | 2025-12-09 |
| CVE-2025-41695 | Phoenix Contact FL SWITCH 跨站脚本漏洞 — FL SWITCH 2005 CWE-79 | 7.1 | High | 2025-12-09 |
| CVE-2025-41745 | PHOENIX CONTACT FL SWITCH 跨站脚本漏洞 — FL SWITCH 2005 CWE-79 | 7.1 | High | 2025-12-09 |
| CVE-2025-41746 | PHOENIX CONTACT FL SWITCH 跨站脚本漏洞 — FL SWITCH 2005 CWE-79 | 7.1 | High | 2025-12-09 |
| CVE-2025-41747 | PHOENIX CONTACT FL SWITCH 跨站脚本漏洞 — FL SWITCH 2005 CWE-79 | 7.1 | High | 2025-12-09 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24904 条 CVE 漏洞。