access:pre-auth 标签下的 CVE 漏洞 24886

access:pre-auth 类型相关 24886 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID	标题	CVSS	风险等级	Published
CVE-2025-36248	IBM Copy Services Manager 跨站脚本漏洞 — Copy Services Manager CWE-79	6.1	Medium	2025-09-19
CVE-2025-7665	WordPress plugin Miniorange OTP Verification with Firebase 安全漏洞 — Miniorange OTP Verification with Firebase CWE-862	8.1	High	2025-09-19
CVE-2025-5948	WordPress plugin Service Finder Bookings 安全漏洞 — Service Finder Bookings CWE-639	9.8	Critical	2025-09-19
CVE-2025-5955	WordPress plugin Service Finder SMS System 安全漏洞 — Service Finder SMS System CWE-288	8.1	High	2025-09-19
CVE-2025-10146	WordPress plugin Download Manager 跨站脚本漏洞 — Download Manager CWE-79	6.1	Medium	2025-09-19
CVE-2025-10690	WordPress plugin Goza 安全漏洞 — Goza - Nonprofit Charity WordPress Theme CWE-862	9.8	Critical	2025-09-19
CVE-2025-48703	Control Web Panel 操作系统命令注入漏洞 — CentOS Web Panel CWE-78	9.0	Critical	2025-09-19
CVE-2025-57296	Tenda AC6 安全漏洞 — n/a	9.8	-	2025-09-19
CVE-2025-47698	Cognex多款产品安全漏洞 — In-Sight 2000 series CWE-319	6.5^AI	Medium ^AI	2025-09-18
CVE-2025-54754	Cognex多款产品安全漏洞 — In-Sight 2000 series CWE-259	8.0	High	2025-09-18
CVE-2025-10493	WordPress plugin Chained Quiz 安全漏洞 — Chained Quiz CWE-639	5.3	Medium	2025-09-18
CVE-2023-49564	Nokia CloudBand Infrastructure Software和Nokia Container Service 安全漏洞 — CBIS,NCS	9.1^AI	Critical ^AI	2025-09-18
CVE-2025-9083	WordPress plugin Ninja Forms 安全漏洞 — Ninja Forms	9.8^AI	Critical ^AI	2025-09-18
CVE-2025-55912	ClipBucket 安全漏洞 — n/a	9.8^AI	Critical ^AI	2025-09-18
CVE-2025-37122	HPE Aruba Networking ClearPass Policy Manager 安全漏洞 — HPE Aruba Networking ClearPass Policy Manager	6.1	Medium	2025-09-17
CVE-2025-59345	Dragonfly 访问控制错误漏洞 — dragonfly CWE-306	9.1^AI	Critical ^AI	2025-09-17
CVE-2025-35436	thorium 安全漏洞 — Thorium CWE-248	5.3	Medium	2025-09-17
CVE-2025-35434	CISA Thorium 安全漏洞 — Thorium CWE-295	4.2	Medium	2025-09-17
CVE-2025-35432	CISA Thorium 安全漏洞 — Thorium CWE-400	5.3	Medium	2025-09-17
CVE-2025-9242	WatchGuard Fireware OS 安全漏洞 — Fireware OS CWE-787	9.3	Critical	2025-09-17
CVE-2025-9972	N-Partner多款产品安全漏洞 — ICG-2510WG-LTE (EU/US) CWE-78	9.8	Critical	2025-09-17
CVE-2025-9971	Planet Industrial Cellular Gateway 安全漏洞 — ICG-2510WG-LTE (EU/US) CWE-306	9.8	Critical	2025-09-17
CVE-2025-10042	WordPress plugin Quiz Maker SQL注入漏洞 — Quiz Maker CWE-89	5.9	Medium	2025-09-17
CVE-2025-10188	WordPress plugin The Hack Repair Guys Plugin Archiver 跨站请求伪造漏洞 — The Hack Repair Guy's Plugin Archiver CWE-352	5.4	Medium	2025-09-17
CVE-2025-9891	WordPress plugin User Sync – Remote User Sync 跨站请求伪造漏洞 — User Sync CWE-352	4.3	Medium	2025-09-17
CVE-2025-9629	WordPress plugin USS Upyun 跨站请求伪造漏洞 — USS Upyun CWE-352	4.3	Medium	2025-09-17
CVE-2025-37124	HPE Aruba Networking SD-WAN Gateways 安全漏洞 — HPE Aruba Networking EdgeConnect SD-WAN Gateway	8.6	High	2025-09-16
CVE-2025-34184	Ilevia EVE X1 Server 安全漏洞 — EVE X1 Server CWE-78	9.8^AI	Critical ^AI	2025-09-16
CVE-2025-34183	Ilevia EVE X1 Server 安全漏洞 — EVE X1 Server CWE-532	9.8^AI	Critical ^AI	2025-09-16
CVE-2025-59270	psPAS 安全漏洞 — psPAS CWE-757	3.1	Low	2025-09-16

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24886 条 CVE 漏洞。

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

access:pre-auth 标签下的 CVE 漏洞 24886

目标达成感谢每一位支持者 — 我们达成了 100% 目标！