access:pre-auth 类型相关 24630 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-25215 | Phicomm多款产品安全漏洞 — Phicomm Routers | 5.3 | - | 2022-03-07 |
| CVE-2022-25218 | 多款PHICOMM产品加密问题漏洞 — Phicomm Routers | 8.1 | - | 2022-03-07 |
| CVE-2022-25217 | Phicomm 多款产品信任管理问题漏洞 — Phicomm Routers | 7.8 | - | 2022-03-07 |
| CVE-2022-25214 | Phicomm多款产品安全漏洞 — Phicomm Routers | 7.4 | - | 2022-03-07 |
| CVE-2022-21170 | Digital Arts i-FILTER 信任管理问题漏洞 — i-FILTER, i-FILTER Browser & Cloud MultiAgent for Windows, and D-SPA using i-FILTER | 7.4 | - | 2022-03-07 |
| CVE-2022-0441 | WordPress plugin MasterStudy LMS 安全漏洞 — MasterStudy LMS – WordPress LMS Plugin CWE-269 | 9.8 | - | 2022-03-07 |
| CVE-2022-0434 | WordPress plugin Page View Count SQL注入漏洞 — Page View Count CWE-89 | 9.8 | - | 2022-03-07 |
| CVE-2022-0429 | WordPress plugin WP Cerber Security, Anti-spam & Malware Scan 跨站脚本漏洞 — WP Cerber Security, Anti-spam & Malware Scan CWE-79 | 6.1 | - | 2022-03-07 |
| CVE-2022-0349 | WordPress plugin NotificationX SQL注入漏洞 — NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor CWE-89 | 9.8 | - | 2022-03-07 |
| CVE-2021-25087 | WordPress的Download Manager插件访问控制错误漏洞 — Download Manager CWE-862 | 7.5 | - | 2022-03-07 |
| CVE-2021-40376 | otris Update Manager 授权问题漏洞 — n/a | 7.8 | - | 2022-03-07 |
| CVE-2021-46704 | GenieACS 操作系统命令注入漏洞 — n/a | 9.8 | - | 2022-03-06 |
| CVE-2021-46384 | MingSoft MCMS 访问控制错误漏洞 — n/a | 9.8 | - | 2022-03-04 |
| CVE-2021-46353 | D-Link Dir-X1860 安全漏洞 — n/a | 5.3 | - | 2022-03-04 |
| CVE-2022-26318 | WatchGuard Firebox 安全漏洞 — n/a | 9.8 | - | 2022-03-04 |
| CVE-2021-46382 | NETGEAR WAC120 跨站脚本漏洞 — n/a | 6.1 | - | 2022-03-04 |
| CVE-2021-46378 | D-Link DIR850 ET850-1.08TRb03 安全漏洞 — n/a | 7.5 | - | 2022-03-04 |
| CVE-2020-18326 | Subrion CMS 跨站请求伪造漏洞 — n/a | 8.8 | - | 2022-03-04 |
| CVE-2022-24573 | Element-IT HTTP Commander 跨站脚本漏洞 — n/a | 6.1 | - | 2022-03-03 |
| CVE-2021-41003 | Aruba AOS-CX 跨站脚本漏洞 — Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series | 9.6 | - | 2022-03-02 |
| CVE-2021-32586 | Fortinet FortiMail 输入验证错误漏洞 — Fortinet FortiMail | 7.7 | High | 2022-03-01 |
| CVE-2021-36171 | Fortinet FortiPortal 安全特征问题漏洞 — Fortinet FortiPortal | 8.1 | High | 2022-03-01 |
| CVE-2022-22262 | Asus Rog Live Service 后置链接漏洞 — Armoury Crate & Aura Creator Installer (ROG Live Service) CWE-59 | 7.7 | High | 2022-03-01 |
| CVE-2020-12775 | Hicos Citizen Certificate Client-side Component 操作系统命令注入漏洞 — citizen certificate client-side component CWE-78 | 9.8 | Critical | 2022-03-01 |
| CVE-2020-22845 | Mikrotik RouterOS 安全漏洞 — n/a | 7.5 | - | 2022-02-28 |
| CVE-2020-22844 | Mikrotik RouterOS 安全漏洞 — n/a | 7.5 | - | 2022-02-28 |
| CVE-2022-23988 | WordPress plugin 跨站脚本漏洞 — WS Form LITE – Drag & Drop Contact Form Builder for WordPress CWE-79 | 6.1 | - | 2022-02-28 |
| CVE-2022-0412 | WordPress SQL注入漏洞 — TI WooCommerce Wishlist CWE-89 | 9.8 | - | 2022-02-28 |
| CVE-2022-0385 | WordPress 跨站脚本漏洞 — Crazy Bone CWE-79 | 6.1 | - | 2022-02-28 |
| CVE-2021-24994 | WordPress plugin跨站脚本漏洞 — Migration, Backup, Staging – WPvivid Backup and Migration Plugin CWE-79 | 6.1 | - | 2022-02-28 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24630 条 CVE 漏洞。