access:pre-auth 类型相关 24864 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-34120 | LimeSurvey 安全漏洞 — LimeSurvey CWE-22 | 7.5AI | High AI | 2025-07-16 |
| CVE-2025-34119 | Tinasoft EasyCafe Server 安全漏洞 — EasyCafe Server CWE-668 | 7.5AI | High AI | 2025-07-16 |
| CVE-2025-34118 | Linknat VOS Manager 安全漏洞 — VOS Manager CWE-22 | 7.5AI | High AI | 2025-07-16 |
| CVE-2025-34117 | Netis Netcore Router 安全漏洞 — Router firmware CWE-912 | 9.8AI | Critical AI | 2025-07-16 |
| CVE-2025-20337 | Cisco ISE和Cisco ISE-PIC 注入漏洞 — Cisco Identity Services Engine Software CWE-74 | 10.0 | Critical | 2025-07-16 |
| CVE-2025-20288 | Cisco Unified Intelligence Center 代码问题漏洞 — Cisco Unified Contact Center Express CWE-918 | 5.8 | Medium | 2025-07-16 |
| CVE-2025-53938 | WeGIA 访问控制错误漏洞 — WeGIA CWE-306 | 9.1AI | Critical AI | 2025-07-16 |
| CVE-2025-34300 | Sawtooth Lighthouse Studio 安全漏洞 — Lighthouse Studio CWE-20 | 9.8AI | Critical AI | 2025-07-16 |
| CVE-2025-7673 | Zyxel VMG8825-T50K 安全漏洞 — VMG8825-T50K firmware CWE-120 | 9.8 | Critical | 2025-07-16 |
| CVE-2025-7359 | WordPress plugin Counter live visitors for WooCommerce 路径遍历漏洞 — Counter live visitors for WooCommerce CWE-22 | 8.2 | High | 2025-07-16 |
| CVE-2025-52689 | Alcatel-Lucent OmniAccess Stellar Products 安全漏洞 — OmniAccess Stellar Products CWE-384 | 9.8 | Critical | 2025-07-16 |
| CVE-2025-2800 | WordPress plugin WP Event Manager 跨站脚本漏洞 — WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce CWE-79 | 7.2 | High | 2025-07-16 |
| CVE-2025-6977 | WordPress plugin ProfileGrid 跨站脚本漏洞 — ProfileGrid – User Profiles, Groups and Communities CWE-79 | 6.1 | Medium | 2025-07-16 |
| CVE-2025-30761 | Oracle Java SE 安全漏洞 — Oracle Java SE | 5.9 | Medium | 2025-07-15 |
| CVE-2025-53031 | Oracle Financial Services Applications 安全漏洞 — Oracle Financial Services Analytical Applications Infrastructure | 5.3 | Medium | 2025-07-15 |
| CVE-2025-50106 | Oracle Java SE 安全漏洞 — Oracle Java SE | 8.1 | High | 2025-07-15 |
| CVE-2025-50107 | Oracle E-Business Suite 访问控制错误漏洞 — Oracle Universal Work Queue | 6.1 | Medium | 2025-07-15 |
| CVE-2025-50072 | Oracle Fusion Middleware 访问控制错误漏洞 — Oracle WebLogic Server | 4.0 | Medium | 2025-07-15 |
| CVE-2025-50073 | Oracle Fusion Middleware 授权问题漏洞 — Oracle WebLogic Server | 6.1 | Medium | 2025-07-15 |
| CVE-2025-50065 | Oracle Java SE 安全漏洞 — Oracle GraalVM for JDK | 3.7 | Low | 2025-07-15 |
| CVE-2025-50059 | Oracle Java SE 访问控制错误漏洞 — Oracle Java SE | 8.6 | High | 2025-07-15 |
| CVE-2025-30762 | Oracle Fusion Middleware 访问控制错误漏洞 — Oracle WebLogic Server | 7.5 | High | 2025-07-15 |
| CVE-2025-30758 | Oracle Siebel CRM 信息泄露漏洞 — Siebel CRM End User | 5.3 | Medium | 2025-07-15 |
| CVE-2025-30759 | Oracle Analytics 访问控制错误漏洞 — Oracle Business Intelligence Enterprise Edition | 6.1 | Medium | 2025-07-15 |
| CVE-2025-30754 | Oracle Java SE 访问控制错误漏洞 — Oracle Java SE | 4.8 | Medium | 2025-07-15 |
| CVE-2025-30756 | Oracle REST Data Services 跨站请求伪造漏洞 — Oracle REST Data Services | 6.1 | Medium | 2025-07-15 |
| CVE-2025-30752 | Oracle Java SE 资源管理错误漏洞 — Oracle Java SE | 3.7 | Low | 2025-07-15 |
| CVE-2025-30749 | Oracle Java SE 安全漏洞 — Oracle Java SE | 8.1 | High | 2025-07-15 |
| CVE-2025-30747 | Oracle PeopleSoft 安全漏洞 — PeopleSoft Enterprise PeopleTools | 4.3 | Medium | 2025-07-15 |
| CVE-2025-30748 | Oracle PeopleSoft 安全漏洞 — PeopleSoft Enterprise PeopleTools | 6.1 | Medium | 2025-07-15 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24864 条 CVE 漏洞。