access:pre-auth 类型相关 24404 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2018-11476 | Vgate iCar 2 Wi-Fi OBD2 Dongle 安全漏洞 — n/a | 8.8 | - | 2018-05-30 |
| CVE-2018-1235 | Dell EMC RecoverPoint和RecoverPoint for Virtual Machines 命令注入漏洞 — Dell EMC RecoverPoint | 9.8 | - | 2018-05-29 |
| CVE-2018-11309 | WordPress MemberMouse SQL注入漏洞 — n/a | 9.1 | - | 2018-05-28 |
| CVE-2018-9091 | KEMP LoadMaster Operating System 安全特征问题漏洞 — n/a | 9.8 | - | 2018-05-25 |
| CVE-2018-6237 | Trend Micro Smart Protection Server 安全漏洞 — Trend Micro Smart Protection Server (Standalone) | 7.5 | - | 2018-05-25 |
| CVE-2018-11469 | HAProxy 安全漏洞 — n/a | 7.5 | - | 2018-05-25 |
| CVE-2018-1467 | IBM Storwize V7000 Unified 安全漏洞 — Storwize V7000 Unified (2073) | 7.5 | - | 2018-05-25 |
| CVE-2017-17158 | 多款Huawei产品信息泄露漏洞 — Berlin-L21HN; Prague-AL00A; Prague-AL00B; Prague-AL00C; Prague-L31; Prague-TL00A; Prague-TL10A | 4.6 | - | 2018-05-24 |
| CVE-2017-17315 | 多款Huawei产品安全漏洞 — DP300; RP200; TE30; TE40; TE50; TE60 | 5.3 | - | 2018-05-24 |
| CVE-2018-5487 | NetApp OnCommand Unified Manager for Linux 安全漏洞 — OnCommand Unified Manager for Linux | 9.8 | - | 2018-05-24 |
| CVE-2018-7942 | 多款Huawei产品Intelligent Baseboard Management 授权问题漏洞 — 1288H V5; 2288H V5; 2488 V5; CH121 V3; CH121L V3; CH121L V5; CH121 V5; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3 | 7.5 | - | 2018-05-24 |
| CVE-2018-10648 | Citrix XenMobile Server 安全漏洞 — n/a | 9.8 | - | 2018-05-23 |
| CVE-2018-8898 | D-Link DSL-3782 Login Panel 安全漏洞 — n/a | 9.8 | - | 2018-05-23 |
| CVE-2018-11366 | WordPress Loginizer插件跨站脚本漏洞 — n/a | 6.1 | - | 2018-05-22 |
| CVE-2018-5256 | CoreOS Tectonic 信息泄露漏洞 — n/a | 7.5 | - | 2018-05-18 |
| CVE-2018-1438 | 多款IBM产品安全漏洞 — n/a | 7.5 | - | 2018-05-17 |
| CVE-2018-10729 | PHOENIX CONTACT FL SWITCH 3xxx、4xxx和48xxx Series 信息泄露漏洞 — n/a | 5.3 | - | 2018-05-17 |
| CVE-2018-0222 | Cisco Digital Network Architecture Center 安全漏洞 — Cisco Digital Network Architecture Center CWE-798 | 9.8 | - | 2018-05-17 |
| CVE-2018-0268 | Cisco Digital Network Architecture Center 安全漏洞 — Cisco Digital Network Architecture Center CWE-358 | 10.0 | - | 2018-05-17 |
| CVE-2018-0270 | Cisco IoT Field Network Director 跨站请求伪造漏洞 — Cisco IoT Field Network Director CWE-352 | 8.8 | - | 2018-05-17 |
| CVE-2018-0271 | Cisco Digital Network Architecture Center API gateway 授权问题漏洞 — Cisco Digital Network Architecture Center CWE-287 | 9.8 | - | 2018-05-17 |
| CVE-2018-0277 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine CWE-295 | 8.6 | - | 2018-05-17 |
| CVE-2018-0280 | Cisco Meeting Server 输入验证漏洞 — Cisco Meeting Server Media Services CWE-20 | 7.5 | - | 2018-05-17 |
| CVE-2018-0289 | Cisco Identity Services Engine logs组件跨站脚本漏洞 — Cisco Identity Services Engine CWE-79 | 6.1 | - | 2018-05-17 |
| CVE-2018-0290 | Cisco SocialMiner 资源管理错误漏洞 — Cisco SocialMiner Notification System CWE-399 | 5.3 | - | 2018-05-17 |
| CVE-2018-0297 | Cisco Firepower Threat Defense detection引擎安全漏洞 — Cisco Firepower Threat Defense Software CWE-693 | 5.8 | - | 2018-05-17 |
| CVE-2018-0325 | Cisco IP Phone 7800 Series和Cisco IP Phone 8800 Series 输入验证漏洞 — Cisco IP Phone 7800 Series and 8800 Series CWE-20 | 7.5 | - | 2018-05-17 |
| CVE-2018-0326 | Cisco TelePresence Server Software Web UI 安全漏洞 — Cisco TelePresence Server CWE-693 | 6.1 | - | 2018-05-17 |
| CVE-2018-0327 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine CWE-79 | 6.1 | - | 2018-05-17 |
| CVE-2018-0328 | Cisco Unified Communications Manager和Cisco Unified Presence 输入验证漏洞 — Cisco Unified Communications Manager and Cisco Unified Presence CWE-79 | 6.1 | - | 2018-05-17 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24404 条 CVE 漏洞。