目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 22808

access:pre-auth 类型相关 22808 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2026-57474 Deloitte AI Assist for Customer 信息泄露漏洞 — AI Assist for CustomerCWE-200 5.3 Medium2026-07-10
CVE-2026-1667 WordPress GEO Plugin by Squirrly SEO 授权问题漏洞 — GEO Plugin by Squirrly SEOCWE-862 7.2 High2026-07-10
CVE-2026-53653 getgrav Grav 资源管理错误漏洞 — gravCWE-770--2026-07-10
CVE-2026-54063 QiAnXin Excelize 资源管理错误漏洞 — excelizeCWE-770 7.5 High2026-07-10
CVE-2026-56675 decolua 9router 授权问题漏洞 — 9routerCWE-287 8.3 High2026-07-10
CVE-2026-55638 decolua 9router 授权问题漏洞 — 9routerCWE-862 8.6 High2026-07-10
CVE-2026-55641 decolua 9router 配置错误漏洞 — 9routerCWE-290 8.2 High2026-07-10
CVE-2026-8609 Grafana OSS 资源管理错误漏洞 — Grafana OSSCWE-400 5.3 Medium2026-07-10
CVE-2026-33382 Grafana OSS 资源管理错误漏洞 — Grafana OSSCWE-400 7.5 High2026-07-10
CVE-2026-59795 JetBrains TeamCity 跨站脚本漏洞 — TeamCityCWE-79 8.1 High2026-07-10
CVE-2026-38059 ST Engineering iDirect Evolution iQ‑Series terminals 授权问题漏洞 — Evolution iQ‑Series terminalsCWE-306 7.5 High2026-07-10
CVE-2026-29519 lucee 跨站脚本漏洞 — LuceeCWE-79 8.2 High2026-07-10
CVE-2026-60091 Mervin Praison PraisonAI 服务端请求伪造漏洞 — PraisonAICWE-918 7.2 High2026-07-10
CVE-2026-57994 phpMyFAQ 信息泄露漏洞 — phpMyFAQCWE-200 5.3 Medium2026-07-10
CVE-2026-56279 Capgo 授权问题漏洞 — CapgoCWE-862 7.5 High2026-07-10
CVE-2026-56814 elixir-plug plug 资源管理错误漏洞 — plugCWE-770--2026-07-10
CVE-2026-11990 WordPress KiviCare 授权问题漏洞 — KiviCare – Clinic & Patient Management System (EHR)CWE-862 5.3 Medium2026-07-10
CVE-2026-9838 WordPress ICS Calendar 跨站脚本漏洞 — ICS CalendarCWE-79 6.1 Medium2026-07-10
CVE-2026-6440 WordPress GoodMeet 跨站请求伪造漏洞 — GoodMeet – Google Meet Integration for Webinar, Meeting & Video ConferenceCWE-352 4.3 Medium2026-07-10
CVE-2026-6802 WordPress Easy Upload Files During Checkout 授权问题漏洞 — Easy Upload Files During CheckoutCWE-639 5.3 Medium2026-07-10
CVE-2026-40007 Apache IoTDB 资源管理错误漏洞 — Apache IoTDBCWE-674--2026-07-10
CVE-2026-40006 Apache IoTDB 授权问题漏洞 — Apache IoTDBCWE-789--2026-07-10
CVE-2026-13347 WordPress Hide My WP Lite 路径遍历漏洞 — Hide My WP LiteCWE-22 7.5 High2026-07-10
CVE-2026-12276 WordPress LA-Studio Element Kit for Elementor 授权问题漏洞 — LA-Studio Element Kit for Elementor--2026-07-10
CVE-2026-12685 EscortWP 处理逻辑错误漏洞 — escortwp--2026-07-10
CVE-2026-12123 WordPress All-in-One Video Gallery 服务端请求伪造漏洞 — All-in-One Video GalleryCWE-918 6.4 Medium2026-07-10
CVE-2026-15298 WordPress TelSender 跨站脚本漏洞 — TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram botCWE-79 7.2 High2026-07-10
CVE-2026-15297 WordPress Brevo 跨站脚本漏洞 — Brevo – Email, SMS, Web Push, Chat, and more.CWE-79 6.1 Medium2026-07-10
CVE-2026-15290 ultimatemember Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin SQL注入漏洞 — Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership PluginCWE-89 7.5 High2026-07-10
CVE-2026-15291 themeatelier ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form 授权问题漏洞 — ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat FormCWE-862 7.5 High2026-07-10

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22808 条 CVE 漏洞。