access:pre-auth 类型相关 24886 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-10499 | WordPress plugin Ninja Forms 跨站请求伪造漏洞 — Ninja Forms – The Contact Form Builder That Grows With You CWE-352 | 4.3 | Medium | 2025-09-27 |
| CVE-2025-36239 | IBM Storage TS4500 Library 跨站脚本漏洞 — Storage TS4500 Library CWE-79 | 6.1 | Medium | 2025-09-27 |
| CVE-2025-36274 | IBM Aspera HTTP Gateway 安全漏洞 — Aspera HTTP Gateway CWE-319 | 7.5 | High | 2025-09-26 |
| CVE-2025-10858 | GitLab 安全漏洞 — GitLab CWE-770 | 7.5 | High | 2025-09-26 |
| CVE-2025-10137 | WordPress plugin Snow Monkey 代码问题漏洞 — Snow Monkey CWE-918 | 5.4 | Medium | 2025-09-26 |
| CVE-2025-9984 | WordPress plugin Featured Image from URL 安全漏洞 — Featured Image from URL (FIFU) CWE-862 | 5.3 | Medium | 2025-09-26 |
| CVE-2025-9985 | WordPress plugin Featured Image from URL 日志信息泄露漏洞 — Featured Image from URL (FIFU) CWE-532 | 5.3 | Medium | 2025-09-26 |
| CVE-2025-10377 | WordPress plugin System Dashboard 跨站请求伪造漏洞 — System Dashboard CWE-352 | 4.3 | Medium | 2025-09-26 |
| CVE-2025-10745 | WordPress plugin Banhammer 安全特征问题漏洞 — Banhammer – Monitor Site Traffic, Block Bad Users and Bots CWE-330 | 5.3 | Medium | 2025-09-26 |
| CVE-2025-10752 | WordPress plugin OAuth Single Sign On – SSO (OAuth Client) 跨站请求伪造漏洞 — OAuth Single Sign On – SSO (OAuth Client) CWE-352 | 4.3 | Medium | 2025-09-26 |
| CVE-2025-10880 | Dingtian DT-R002 安全漏洞 — DT-R002 CWE-522 | 7.5AI | High AI | 2025-09-25 |
| CVE-2025-10879 | Dingtian DT-R002 安全漏洞 — DT-R002 CWE-522 | 5.3AI | Medium AI | 2025-09-25 |
| CVE-2025-20363 | Cisco多款产品 安全漏洞 — IOS CWE-122 | 9.0 | Critical | 2025-09-25 |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CWE-862 | 6.5 | Medium | 2025-09-25 |
| CVE-2024-48014 | Dell BSAFE Micro Edition Suite 缓冲区错误漏洞 — BSAFE Micro Edition Suite CWE-787 | 7.5 | High | 2025-09-25 |
| CVE-2025-36601 | Dell PowerScale OneFS 信息泄露漏洞 — PowerScale OneFS CWE-200 | 4.0 | Medium | 2025-09-25 |
| CVE-2020-36851 | cors-anywhere 安全漏洞 — Rob--W / cors-anywhere CWE-942 | 9.1AI | Critical AI | 2025-09-25 |
| CVE-2025-10540 | iMonitor EAM 安全漏洞 — iMonitor EAM CWE-319 | 9.8AI | Critical AI | 2025-09-25 |
| CVE-2025-20314 | Cisco IOS XE 安全漏洞 — Cisco IOS XE Software CWE-232 | 6.7 | Medium | 2025-09-24 |
| CVE-2025-48867 | Horilla 跨站脚本漏洞 — horilla CWE-79 | 4.8 | Medium | 2025-09-24 |
| CVE-2025-48869 | Horilla 访问控制错误漏洞 — horilla CWE-284 | 7.5 | High | 2025-09-24 |
| CVE-2025-20316 | Cisco IOS XE 访问控制错误漏洞 — Cisco IOS XE Software CWE-284 | 5.3 | Medium | 2025-09-24 |
| CVE-2025-20293 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE Software CWE-459 | 5.3 | Medium | 2025-09-24 |
| CVE-2025-20240 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE Software CWE-692 | 6.1 | Medium | 2025-09-24 |
| CVE-2025-20313 | Cisco IOS XE 安全漏洞 — Cisco IOS XE Software CWE-35 | 6.7 | Medium | 2025-09-24 |
| CVE-2025-20311 | Cisco IOS XE Software 代码问题漏洞 — Cisco IOS XE Software CWE-19 | 7.4 | High | 2025-09-24 |
| CVE-2025-20160 | Cisco IOS和Cisco IOS XE Software 授权问题漏洞 — IOS CWE-287 | 8.1 | High | 2025-09-24 |
| CVE-2025-20315 | Cisco IOS XE 安全漏洞 — Cisco IOS XE Software CWE-805 | 8.6 | High | 2025-09-24 |
| CVE-2025-20334 | Cisco IOS XE 命令注入漏洞 — Cisco IOS XE Software CWE-77 | 8.8 | High | 2025-09-24 |
| CVE-2025-20339 | Cisco SD-WAN vEdge 访问控制错误漏洞 — Cisco SD-WAN vEdge Cloud CWE-284 | 5.8 | Medium | 2025-09-24 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24886 条 CVE 漏洞。