access:pre-auth 类型相关 24886 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-26476 | Dell ECS 安全漏洞 — ECS CWE-321 | 8.4 | High | 2025-08-04 |
| CVE-2025-38741 | Dell Enterprise SONiC OS 安全漏洞 — Enterprise SONiC OS CWE-321 | 7.5 | High | 2025-08-04 |
| CVE-2013-10054 | Sourceforge LibrettoCMS 安全漏洞 — LibrettoCMS CWE-434 | 9.8AI | Critical AI | 2025-08-04 |
| CVE-2025-34147 | Itemir M300 Wi-Fi Repeater 安全漏洞 — M300 Wi-Fi Repeater CWE-78 | 8.8AI | High AI | 2025-08-04 |
| CVE-2025-38739 | Dell Digital Delivery 安全漏洞 — Dell Digital Delivery CWE-522 | 7.2 | High | 2025-08-04 |
| CVE-2025-36594 | Dell PowerProtect Data Domain 安全漏洞 — PowerProtect Data Domain Feature Release CWE-290 | 9.8 | Critical | 2025-08-04 |
| CVE-2025-36605 | Dell Unity 跨站脚本漏洞 — Unity CWE-79 | 6.1 | Medium | 2025-08-04 |
| CVE-2025-36604 | Dell Unity 操作系统命令注入漏洞 — Unity CWE-78 | 7.3 | High | 2025-08-04 |
| CVE-2025-41691 | CODESYS Control 代码问题漏洞 — Control RTE (SL) CWE-476 | 7.5 | High | 2025-08-04 |
| CVE-2025-54554 | Tera Insights tiCrypt 安全漏洞 — tiCrypt CWE-863 | 5.3 | Medium | 2025-08-04 |
| CVE-2025-7710 | WordPress plugin Brave Conversion Engine 安全漏洞 — Brave Conversion Engine (PRO) CWE-288 | 9.8 | Critical | 2025-08-02 |
| CVE-2025-6722 | WordPress plugin BitFire Security 信息泄露漏洞 — BitFire Security – Firewall, WAF, Bot/Spam Blocker, Login Security CWE-200 | 5.3 | Medium | 2025-08-02 |
| CVE-2025-8400 | WordPress plugin Image Gallery 跨站脚本漏洞 — Image Gallery CWE-79 | 6.1 | Medium | 2025-08-02 |
| CVE-2025-6832 | WordPress plugin All in One Time Clock Lite 跨站脚本漏洞 — All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier CWE-79 | 6.1 | Medium | 2025-08-02 |
| CVE-2025-8152 | WordPress plugin WP CTA 安全漏洞 — WP CTA – Call Now Button, Sticky Button & Call to Action Builder CWE-862 | 5.3 | Medium | 2025-08-02 |
| CVE-2025-54955 | OpenNebula 竞争条件问题漏洞 — OpenNebula CWE-362 | 8.1 | High | 2025-08-02 |
| CVE-2025-54792 | LocalSend 安全漏洞 — localsend CWE-300 | 6.8 | - | 2025-08-01 |
| CVE-2013-10049 | Raidsonic IB-NAS5220和Raidsonic IB-NAS4220 安全漏洞 — IB-NAS5220 CWE-78 | 9.8 | - | 2025-08-01 |
| CVE-2013-10047 | MiniWeb HTTP server 安全漏洞 — MiniWeb CWE-434 | 9.8 | - | 2025-08-01 |
| CVE-2012-10022 | Kloxo 安全漏洞 — Kloxo CWE-269 | 8.4 | - | 2025-08-01 |
| CVE-2013-10055 | Havalite CMS 安全漏洞 — Havalite CMS CWE-434 | 9.8 | - | 2025-08-01 |
| CVE-2013-10048 | D-Link DIR-600和D-Link DIR-300 rev B 安全漏洞 — DIR-600 CWE-78 | 9.8 | - | 2025-08-01 |
| CVE-2013-10046 | Agnitum Outpost Internet Security 安全漏洞 — Outpost Internet Security CWE-22 | 8.4 | - | 2025-08-01 |
| CVE-2025-54595 | Pearcleaner 安全漏洞 — Pearcleaner CWE-78 | 7.3 | High | 2025-08-01 |
| CVE-2025-5921 | WordPress plugin SureForms 安全漏洞 — SureForms | 6.1 | - | 2025-08-01 |
| CVE-2025-7443 | WordPress plugin BerqWP 代码问题漏洞 — BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript CWE-434 | 8.1 | High | 2025-08-01 |
| CVE-2025-7725 | WordPress plugin Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery 跨站脚本漏洞 — Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe CWE-79 | 7.2 | High | 2025-08-01 |
| CVE-2025-5947 | WordPress plugin Service Finder Bookings 安全漏洞 — Service Finder Bookings CWE-639 | 9.8 | Critical | 2025-08-01 |
| CVE-2025-5954 | WordPress plugin Service Finder SMS System 安全漏洞 — Service Finder SMS System CWE-269 | 9.8 | Critical | 2025-08-01 |
| CVE-2025-50870 | Institute-of-Current-Students 安全漏洞 — n/a | 6.5 | - | 2025-08-01 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24886 条 CVE 漏洞。