目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 22673

access:pre-auth 类型相关 22673 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2026-17612 Honeywell S35 Series 信息泄露漏洞 — S35 Series 3M/5M/8M/PinHole CamerasCWE-200 6.9 Medium2026-07-27
CVE-2026-64643 Next.js 未授权披露内部服务器函数端点漏洞 — next.jsCWE-201 6.3 Medium2026-07-27
CVE-2026-66731 facil.io 0.7.5-0.7.6 HTTP/1.1分块传输编码解析崩溃DoS漏洞 — facil.ioCWE-125 7.5 High2026-07-27
CVE-2026-66730 facil.io 0.6.0-0.7.6 无限循环拒绝服务漏洞 — facil.ioCWE-835 7.5 High2026-07-27
CVE-2026-66729 facil.io 0.7.6 整数下溢拒绝服务漏洞 — facil.ioCWE-125 7.5 High2026-07-27
CVE-2026-63077 TeamCity < 2026.1.3 / 2025.11.7 远程代码执行漏洞 — TeamCityCWE-502 9.8 Critical2026-07-27
CVE-2026-59251 Erlang OTP 资源管理错误漏洞 — OTPCWE-770 8.7 High2026-07-27
CVE-2026-59250 Erlang OTP 缓冲区错误漏洞 — OTPCWE-120 8.3 High2026-07-27
CVE-2026-42792 Erlang OTP 异常处理不当漏洞 — OTPCWE-755 6.3 Medium2026-07-27
CVE-2026-58227 Erlang OTP 资源管理错误漏洞 — OTPCWE-674 8.7 High2026-07-27
CVE-2026-66050 NitroShare 路径遍历漏洞 — nitroshare-desktopCWE-22 7.5 High2026-07-27
CVE-2026-66477 WordPress Gillion 授权问题漏洞 — GillionCWE-862 5.3 Medium2026-07-27
CVE-2026-66474 WordPress HT Script 跨站请求伪造漏洞 — Insert Headers and Footers Code – HT ScriptCWE-352 4.3 Medium2026-07-27
CVE-2026-66438 WordPress Exclusive Addons for Elementor 信息泄露漏洞 — Exclusive Addons ElementorCWE-497 5.3 Medium2026-07-27
CVE-2026-66428 WordPress WP Google Review Slider 跨站请求伪造漏洞 — WP Google Review SliderCWE-352 4.3 Medium2026-07-27
CVE-2026-65567 WordPress Event Tickets 授权问题漏洞 — Event TicketsCWE-862 5.3 Medium2026-07-27
CVE-2026-65564 WordPress MapPress 信息泄露漏洞 — MapPress Maps for WordPressCWE-497 5.3 Medium2026-07-27
CVE-2026-65558 WordPress AffiliateX 服务端请求伪造漏洞 — AffiliateXCWE-918 5.4 Medium2026-07-27
CVE-2026-65435 Thrive Themes Thrive Leads 授权问题漏洞 — Thrive Leads VersionCWE-862 6.5 Medium2026-07-27
CVE-2026-59558 WordPress Booking Calendar 跨站脚本漏洞 — Booking CalendarCWE-79 7.1 High2026-07-27
CVE-2026-59557 WordPress Events Made Easy 授权问题漏洞 — Events Made EasyCWE-862 6.5 Medium2026-07-27
CVE-2026-59556 WordPress Dynamic Pricing With Discount Rules for WooCommerce 跨站脚本漏洞 — Dynamic Pricing With Discount Rules for WooCommerceCWE-79 7.1 High2026-07-27
CVE-2026-59553 WordPress Product Feed Manager For WooCommerce 跨站脚本漏洞 — Product Feed ManagerCWE-79 7.1 High2026-07-27
CVE-2026-59552 WordPress 3D Flipbook PDF Viewer & Embedder 服务端请求伪造漏洞 — 3D Flipbook PDF Viewer &amp; EmbedderCWE-918 7.2 High2026-07-27
CVE-2026-59550 Strategy11 Team AWP Classifieds SQL注入漏洞 — AWP ClassifiedsCWE-89 9.3 Critical2026-07-27
CVE-2026-59549 WordPress rtMedia SQL注入漏洞 — rtMedia for WordPress, BuddyPress and bbPressCWE-89 9.3 Critical2026-07-27
CVE-2026-59548 WordPress Byteflows Travel & Hotel Booking 信息泄露漏洞 — Byteflows Travel &amp; Hotel BookingCWE-497 7.5 High2026-07-27
CVE-2026-59538 Ruben Garcia GamiPress SQL注入漏洞 — GamiPressCWE-89 9.3 Critical2026-07-27
CVE-2026-59536 WordPress CoCart – Headless REST API for WooCommerce 授权问题漏洞 — CoCart – Headless ecommerceCWE-862 7.5 High2026-07-27
CVE-2026-59535 Thrive Themes Thrive Product Manager 授权问题漏洞 — Thrive Product ManagerCWE-862 7.3 High2026-07-27

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 22673 条 CVE 漏洞。