access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-30175 | Siemens多款产品 缓冲区错误漏洞 — SIMATIC PCS neo V4.1 CWE-787 | 7.5 | High | 2025-05-13 |
| CVE-2025-30174 | Siemens多款产品 缓冲区错误漏洞 — SIMATIC PCS neo V4.1 CWE-125 | 7.5 | High | 2025-05-13 |
| CVE-2025-26390 | Siemens OZW672和Siemens OZW772 SQL注入漏洞 — OZW672 CWE-89 | 9.8 | Critical | 2025-05-13 |
| CVE-2025-26389 | Siemens OZW672 操作系统命令注入漏洞 — OZW672 CWE-78 | 10.0 | Critical | 2025-05-13 |
| CVE-2024-51447 | Siemens Polarion 安全漏洞 — Polarion V2310 CWE-204 | 5.3 | Medium | 2025-05-13 |
| CVE-2024-23815 | Siemens Desigo CC 访问控制错误漏洞 — Desigo CC CWE-306 | 7.5 | High | 2025-05-13 |
| CVE-2025-22248 | charts 安全漏洞 — Bitnami | 9.8AI | Critical AI | 2025-05-13 |
| CVE-2025-41645 | SMA Solar Sunny Portal 安全漏洞 — www.sunnyportal.com CWE-669 | 8.6 | High | 2025-05-13 |
| CVE-2025-4396 | WordPress plugin Relevanssi SQL注入漏洞 — Relevanssi Premium CWE-89 | 7.5 | High | 2025-05-13 |
| CVE-2025-43006 | SAP Supplier Relationship Management 跨站脚本漏洞 — SAP Supplier Relationship Management (Master Data Management Catalog) CWE-79 | 6.1 | Medium | 2025-05-13 |
| CVE-2025-43005 | SAP GUI 安全漏洞 — SAP GUI for Windows CWE-256 | 4.3 | Medium | 2025-05-13 |
| CVE-2025-43004 | SAP Digital Manufacturing 安全漏洞 — SAP Digital Manufacturing (Production Operator Dashboard) CWE-862 | 5.3 | Medium | 2025-05-13 |
| CVE-2025-30018 | SAP Supplier Relationship Management 代码问题漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-611 | 8.6 | High | 2025-05-13 |
| CVE-2025-30012 | SAP Supplier Relationship Management 代码问题漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-502 | 10.0 | Critical | 2025-05-13 |
| CVE-2025-30011 | SAP Supplier Relationship Management 安全漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-497 | 5.3 | Medium | 2025-05-13 |
| CVE-2025-30010 | SAP Supplier Relationship Management 输入验证错误漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-601 | 6.1 | Medium | 2025-05-13 |
| CVE-2025-30009 | SAP Supplier Relationship Management 跨站脚本漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-79 | 6.1 | Medium | 2025-05-13 |
| CVE-2025-45746 | ZKTeco ZKBio CVSecurity 安全漏洞 — ZKBio CVSecurity CWE-321 | 6.5 | Medium | 2025-05-13 |
| CVE-2024-46506 | NetAlertX 安全漏洞 — NetAlertX CWE-306 | 10.0 | Critical | 2025-05-13 |
| CVE-2024-48766 | NetAlertX 安全漏洞 — NetAlertX CWE-698 | 8.6 | High | 2025-05-13 |
| CVE-2023-49641 | Kashipara Billing Software SQL注入漏洞 — Billing Software CWE-89 | 9.8 | Critical | 2025-05-12 |
| CVE-2025-30448 | Apple多款产品 安全漏洞 — iOS and iPadOS | 7.5AI | High AI | 2025-05-12 |
| CVE-2025-3659 | Digi多款产品 安全漏洞 — Digi PortServer TS CWE-287 | 9.8AI | Critical AI | 2025-05-12 |
| CVE-2025-46739 | Schweitzer Engineering Laboratories多款产品 安全漏洞 — SEL Blueframe OS CWE-307 | 8.1 | High | 2025-05-12 |
| CVE-2025-3496 | AUMA AC 安全漏洞 — AC1.2 CWE-120 | 7.5 | High | 2025-05-12 |
| CVE-2025-4560 | NetVision Information ISOinsight 安全漏洞 — ISOinsight CWE-306 | 6.5 | Medium | 2025-05-12 |
| CVE-2025-4559 | NetVision Information ISOinsight 安全漏洞 — ISOinsight CWE-89 | 9.8 | Critical | 2025-05-12 |
| CVE-2025-4558 | WormHole Tech GPM 安全漏洞 — GPM CWE-620 | 9.8 | Critical | 2025-05-12 |
| CVE-2025-4557 | ZONG YU Parking Management System 安全漏洞 — Parking Management System CWE-306 | 9.1 | Critical | 2025-05-12 |
| CVE-2025-4556 | ZONG YU Parking Management System 代码问题漏洞 — Okcat Parking Management Platform CWE-434 | 9.8 | Critical | 2025-05-12 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。