目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1325

100%

type:auth-bypass 标签下的 CVE 漏洞 1882

type:auth-bypass 类型相关 1882 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

type:auth-bypass 标签标识了身份验证绕过漏洞,指攻击者无需合法凭证即可访问受限资源或执行特权操作。此类漏洞极具危害性,因直接破坏系统核心安全防线,可能导致数据泄露、未授权操作甚至完全控制服务器。典型场景包括利用逻辑缺陷绕过登录验证、伪造会话令牌或滥用API权限校验缺失。鉴于其广泛影响,该类别涵盖1739个CVE,凸显了修复认证机制缺陷在网络安全中的紧迫性与重要性。

CVE ID标题CVSS风险等级Published
CVE-2026-53776 Perry < 0.5.1166 JWT过期验证绕过漏洞 — perryCWE-613 9.1 Critical2026-06-16
CVE-2025-13036 罗克韦尔 FactoryTalk Historian 站点版认证绕过漏洞 — FactoryTalk Historian SECWE-362--2026-06-16
CVE-2026-12225 Syracom Secure Login 双因素验证绕过漏洞 — Secure Login (2FA) for JiraCWE-288--2026-06-16
CVE-2026-40799 WordPress Simple Cloudflare Turnstile插件 <=1.38.0 认证漏洞 — Simple Cloudflare TurnstileCWE-288 5.8 Medium2026-06-15
CVE-2026-49953 Discuz! X5.0 授权问题漏洞 — Discuz! X5.0CWE-804 6.5 Medium2026-06-15
CVE-2026-49952 Discuz! X5.0 加密问题漏洞 — Discuz! X5.0CWE-323 9.1 Critical2026-06-15
CVE-2026-49062 WordPress Faust.js插件<=1.8.7 认证漏洞 — Faust.jsCWE-288 8.8 High2026-06-15
CVE-2026-49757 AshAuthentication OAuth2/OIDC 账户接管漏洞 — ash_authenticationCWE-290--2026-06-15
CVE-2026-36537 ThingsBoard v4.3.0.1 OAuth认证绕过致账户接管 — n/a--2026-06-15
CVE-2026-11443 Allegra 跨站脚本漏洞 — AllegraCWE-79--2026-06-12
CVE-2026-45013 ApostropheCMS 输入验证错误漏洞 — apostropheCWE-20 8.1 High2026-06-12
CVE-2026-48558 SimpleHelp 加密问题漏洞 — SimpleHelpCWE-347 10.0 Critical2026-06-12
CVE-2026-5792 Hedef Media Promotion Interactive Media Marketing Related Marketing Cloud 授权问题漏洞 — Related Marketing Cloud (RMC)CWE-290 6.5 Medium2026-06-12
CVE-2026-6853 Başbelen Group Food Cafe Pause+ Mobile App 授权问题漏洞 — Pause+ Mobile AppCWE-307 9.8 Critical2026-06-12
CVE-2026-50623 Apache CXF 授权问题漏洞 — Apache CXFCWE-287--2026-06-12
CVE-2025-7064 ABB Freelance 安全漏洞 — FreelanceCWE-305 6.6 Medium2026-06-11
CVE-2026-10795 WordPress plugin UpdraftPlus: WP Backup & Migration Plugin 数据伪造问题漏洞 — UpdraftPlus: WP Backup & Migration PluginCWE-347 8.1 High2026-06-11
CVE-2026-45567 Roxy-WI 授权问题漏洞 — roxy-wiCWE-287 8.3 High2026-06-10
CVE-2026-6090 Lenovo Smart Connect 安全漏洞 — Smart ConnectCWE-290 7.0 High2026-06-10
CVE-2026-52754 National Security Agency Ghidra 数据伪造问题漏洞 — ghidraCWE-347 8.8 High2026-06-10
CVE-2026-10523 Ivanti Sentry 安全漏洞 — SentryCWE-288 9.9 Critical2026-06-09
CVE-2026-11618 Taier 授权问题漏洞 — TaierCWE-287 7.3 High2026-06-09
CVE-2026-36721 bookcars 安全漏洞 — n/a--2026-06-09
CVE-2026-25555 OpenBullet2 安全漏洞 — openbullet2CWE-305 9.8 Critical2026-06-08
CVE-2026-41448 AdGuardHome 路径遍历漏洞 — AdGuardHomeCWE-22 9.4 Critical2026-06-08
CVE-2026-11515 SourceCodester Barangay Resident Profiling and Information Management System 信任管理问题漏洞 — Barangay Resident Profiling and Information Management SystemCWE-259 5.3 Medium2026-06-08
CVE-2026-50751 Check Point Quantum Security Gateway 授权问题漏洞 — Quantum Security GatewayCWE-287--2026-06-08
CVE-2026-50752 Check Point Quantum Security Gateway和Check Point Spark Firewalls 信任管理问题漏洞 — Quantum Security GatewayCWE-295 7.4 High2026-06-08
CVE-2026-9016 WordPress plugin Debug Log Manager – Conveniently Monitor and Inspect Errors 安全漏洞 — Debug Log Manager – Conveniently Monitor and Inspect ErrorsCWE-117 5.3 Medium2026-06-06
CVE-2026-49448 authentik 授权问题漏洞 — authentikCWE-287 9.8 Critical2026-06-02

type:auth-bypass 是常见的弱点类别,本平台收录该类弱点关联的 1882 条 CVE 漏洞。