access:pre-auth 类型相关 24614 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-24507 | WordPress SQL注入漏洞 — Astra Pro Addon CWE-89 | 9.8 | - | 2021-08-09 |
| CVE-2021-24304 | WordPress 跨站脚本漏洞 — Newsmag CWE-79 | 6.1 | - | 2021-08-09 |
| CVE-2021-24499 | WordPress 代码问题漏洞 — Workreap CWE-434 | 9.8 | - | 2021-08-09 |
| CVE-2021-38167 | Roxy-WI SQL注入漏洞 — n/a | 9.8 | - | 2021-08-07 |
| CVE-2021-38159 | Progress Software MOVEit Transfer SQL注入漏洞 — n/a | 9.8 | - | 2021-08-07 |
| CVE-2021-38157 | Leostream Connection Broker 跨站脚本漏洞 — n/a | 6.1 | - | 2021-08-06 |
| CVE-2021-20598 | Mitsubishi Electric MELSEC iQ-R series 授权问题漏洞 — MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU | 8.2 | - | 2021-08-06 |
| CVE-2021-20594 | Mitsubishi Electric MELSEC iQ-R series 信息泄露漏洞 — Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU | 5.3 | - | 2021-08-06 |
| CVE-2021-20597 | Mitsubishi Electric MELSEC iQ-R series 访问控制错误漏洞 — Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU | 9.1 | - | 2021-08-06 |
| CVE-2021-38155 | OpenStack 安全漏洞 — n/a | 7.5 | - | 2021-08-06 |
| CVE-2021-20592 | Mitsubishi Electric GOT2000 安全漏洞 — GOT2000 series GT27 model; GT25 model; GT23 model; GT SoftGOT2000 | 7.5 | - | 2021-08-05 |
| CVE-2021-21739 | ZTE ZXCTN 数据伪造问题漏洞 — <ZXCTN 6120H> | - | - | 2021-08-05 |
| CVE-2021-23849 | Bosch IP cameras 跨站请求伪造漏洞 — CPP Firmware CWE-352 | 7.5 | High | 2021-08-05 |
| CVE-2021-32579 | Acronis True Image 授权问题漏洞 — n/a | 7.8 | - | 2021-08-05 |
| CVE-2021-38095 | Planview Spigit 安全漏洞 — n/a | 5.3 | - | 2021-08-05 |
| CVE-2021-22124 | Fortinet FortiSandbox 和 Fortinet FortiAuthenticator 资源管理错误漏洞 — Fortinet FortiSandbox, FortiAuthenticator | 7.5 | High | 2021-08-04 |
| CVE-2021-24014 | Fortinet FortiSandbox 跨站脚本漏洞 — Fortinet FortiSandbox | 5.4 | Medium | 2021-08-04 |
| CVE-2021-1602 | Cisco Small Business 操作系统命令注入漏洞 — Cisco Small Business RV Series Router Firmware CWE-78 | 8.2 | High | 2021-08-04 |
| CVE-2021-35397 | Drogon 路径遍历漏洞 — n/a | 7.5 | - | 2021-08-04 |
| CVE-2021-33323 | Liferay Portal 和 Liferay DXP 安全漏洞 — n/a | 5.3 | - | 2021-08-03 |
| CVE-2021-37558 | Centreon SQL注入漏洞 — n/a | 9.8 | - | 2021-08-03 |
| CVE-2021-21579 | Dell EMC iDRAC9 输入验证错误漏洞 — Integrated Dell Remote Access Controller (iDRAC) CWE-601 | 6.1 | Medium | 2021-08-03 |
| CVE-2021-21578 | Dell EMC iDRAC9 输入验证错误漏洞 — Integrated Dell Remote Access Controller (iDRAC) CWE-601 | 6.1 | Medium | 2021-08-03 |
| CVE-2021-24504 | WordPress plugin LMS 跨站脚本漏洞 — WP LMS – Best WordPress LMS Plugin CWE-79 | 6.1 | - | 2021-08-02 |
| CVE-2021-24474 | WordPress 插件跨站脚本漏洞 — Awesome Weather Widget CWE-79 | 6.1 | - | 2021-08-02 |
| CVE-2021-24472 | WordPress 插件代码问题漏洞 — QT KenthaRadio CWE-918 | 9.8 | - | 2021-08-02 |
| CVE-2021-34575 | MB connect line 多款产品 信息泄露漏洞 — mymbCONNECT24 CWE-203 | 7.5 | High | 2021-08-02 |
| CVE-2021-20114 | Tecnick.com TCExam 信息泄露漏洞 — TCExam | 7.5 | - | 2021-07-29 |
| CVE-2021-21538 | DELL Dell EMC iDRAC9 授权问题漏洞 — Integrated Dell Remote Access Controller (iDRAC) CWE-287 | 9.6 | Critical | 2021-07-29 |
| CVE-2020-5329 | DELL Dell EMC Avamar Server 输入验证错误漏洞 — Avamar CWE-601 | 6.1 | - | 2021-07-29 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24614 条 CVE 漏洞。