access:pre-auth 类型相关 24886 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-7366 | WordPress plugin REHub 代码注入漏洞 — REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme CWE-94 | 7.3 | High | 2025-09-06 |
| CVE-2025-58366 | Onyxia 安全漏洞 — onyxia CWE-522 | 9.1AI | Critical AI | 2025-09-05 |
| CVE-2025-41408 | LY Yahoo! Shopping App 安全漏洞 — "Yahoo! Shopping" App for Android CWE-939 | 6.1AI | Medium AI | 2025-09-05 |
| CVE-2025-55037 | TkEasyGUI 操作系统命令注入漏洞 — TkEasyGUI CWE-78 | 9.8AI | Critical AI | 2025-09-05 |
| CVE-2025-9990 | WordPress plugin Helpdesk Integration 安全漏洞 — WordPress Helpdesk Integration CWE-98 | 8.1 | High | 2025-09-05 |
| CVE-2024-43184 | IBM Jazz Foundation 跨站脚本漏洞 — Jazz Foundation CWE-79 | 6.1 | Medium | 2025-09-04 |
| CVE-2025-7385 | Concept Intermedia GOV CMS SQL注入漏洞 — GOV CMS CWE-89 | 9.8AI | Critical AI | 2025-09-04 |
| CVE-2025-9616 | WordPress plugin PopAd 跨站请求伪造漏洞 — PopAd CWE-352 | 5.3 | Medium | 2025-09-04 |
| CVE-2025-8268 | WordPress plugin AI Engine 安全漏洞 — AI Engine – The Chatbot, AI Framework & MCP for WordPress CWE-862 | 6.5 | Medium | 2025-09-03 |
| CVE-2025-20291 | Cisco Webex Meetings 输入验证错误漏洞 — Cisco Webex Meetings CWE-601 | 4.3 | Medium | 2025-09-03 |
| CVE-2025-20335 | Cisco多款产品 访问控制错误漏洞 — Cisco Session Initiation Protocol (SIP) Software CWE-284 | 5.3 | Medium | 2025-09-03 |
| CVE-2025-20336 | Cisco多款产品 信息泄露漏洞 — Cisco Session Initiation Protocol (SIP) Software CWE-200 | 5.3 | Medium | 2025-09-03 |
| CVE-2025-20330 | Cisco Unified Communications Manager IM & Presence 跨站脚本漏洞 — Cisco Unified Communications Manager IM and Presence Service CWE-79 | 6.1 | Medium | 2025-09-03 |
| CVE-2025-20326 | Cisco Unified Communications Manager 跨站请求伪造漏洞 — Cisco Unified Communications Manager CWE-352 | 4.3 | Medium | 2025-09-03 |
| CVE-2025-55944 | Slink 安全漏洞 — n/a | 6.1AI | Medium AI | 2025-09-03 |
| CVE-2024-58259 | Rancher 安全漏洞 — rancher CWE-770 | 8.2 | High | 2025-09-02 |
| CVE-2025-52551 | Copeland E2 Facility Management Systems 安全漏洞 — E2 Facility Management System CWE-306 | 9.8AI | Critical AI | 2025-09-02 |
| CVE-2025-52546 | Copeland E3 Supervisory Control 安全漏洞 — E3 Supervisory Control CWE-434 | 6.1AI | Medium AI | 2025-09-02 |
| CVE-2025-52544 | Copeland E3 Supervisory Control 安全漏洞 — E3 Supervisory Control CWE-20 | 7.5AI | High AI | 2025-09-02 |
| CVE-2025-41031 | T-INNOVA Deporsite 安全漏洞 — Deporsite CWE-863 | 5.3AI | Medium AI | 2025-09-02 |
| CVE-2025-41030 | T-INNOVA Deporsite 安全漏洞 — Deporsite CWE-863 | 5.3AI | Medium AI | 2025-09-02 |
| CVE-2024-28988 | SolarWinds Web Help Desk 代码问题漏洞 — Web Help Desk CWE-502 | 9.8 | Critical | 2025-09-01 |
| CVE-2025-0656 | IBM Concert Software 跨站脚本漏洞 — Concert Software CWE-79 | 6.1 | Medium | 2025-09-01 |
| CVE-2025-54857 | Seikou202fSolutions SkyBridge BASIC MB-A130 操作系统命令注入漏洞 — SkyBridge BASIC MB-A130 CWE-78 | 9.8 | - | 2025-09-01 |
| CVE-2025-7731 | Mitsubishi Electric MELSEC iQ-F Series CPU 安全漏洞 — MELSEC iQ-F Series FX5U-32MT/ES CWE-319 | 7.5 | High | 2025-09-01 |
| CVE-2025-7405 | Mitsubishi Electric MELSEC iQ-F Series CPU 访问控制错误漏洞 — MELSEC iQ-F Series FX5U-32MT/ES CWE-306 | 7.3 | High | 2025-09-01 |
| CVE-2025-9569 | Sunnet eHRD CTMS 跨站脚本漏洞 — eHRD CTMS CWE-79 | 6.1 | Medium | 2025-09-01 |
| CVE-2025-9568 | Sunnet eHRD CTMS 跨站脚本漏洞 — eHRD CTMS CWE-79 | 6.1 | Medium | 2025-09-01 |
| CVE-2025-9567 | Sunnet eHRD CTMS 跨站脚本漏洞 — eHRD CTMS CWE-79 | 6.1 | Medium | 2025-09-01 |
| CVE-2025-9699 | SourceCodester Online Polling System Code 安全漏洞 — Online Polling System Code CWE-89 | 7.3 | High | 2025-08-30 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24886 条 CVE 漏洞。