access:pre-auth 类型相关 22856 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-54004 | getkirby kirby 授权问题漏洞 — kirbyCWE-862 | - | - | 2026-07-09 |
| CVE-2026-59149 | Mockoon 路径遍历漏洞 — mockoonCWE-22 | 6.5 | Medium | 2026-07-09 |
| CVE-2026-59148 | Mockoon 授权问题漏洞 — mockoonCWE-306 | 8.8 | High | 2026-07-09 |
| CVE-2026-61344 | Superior Court of California Hearing Reminder Service 授权问题漏洞 — Hearing Reminder ServiceCWE-306 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-59817 | Ghost 输入验证错误漏洞 — GhostCWE-472 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-59726 | rUv Ruflo 授权问题漏洞 — rufloCWE-78 | 10.0 | Critical | 2026-07-09 |
| CVE-2026-59720 | Hoppscotch 信息泄露漏洞 — hoppscotchCWE-200 | 7.5 | High | 2026-07-09 |
| CVE-2026-13462 | PayRange 加密问题漏洞 — PayRange | - | - | 2026-07-09 |
| CVE-2026-59218 | Open WebUI 侧信道信息泄露漏洞 — open-webuiCWE-208 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-59206 | n8n-io n8n 输入验证错误漏洞 — n8nCWE-1321 | - | - | 2026-07-09 |
| CVE-2026-11404 | Cesanta Mongoose 缓冲区错误漏洞 — MongooseCWE-125 | 7.5 | High | 2026-07-09 |
| CVE-2026-60109 | Zeek Network Monitoring Project Zeek Network Security Monitor 异常处理不当漏洞 — zeekCWE-476 | 7.5 | High | 2026-07-09 |
| CVE-2026-60108 | Zeek Network Monitoring Project Zeek Network Security Monitor 资源管理错误漏洞 — zeekCWE-770 | 7.5 | High | 2026-07-09 |
| CVE-2026-54801 | Siemens CPCI85 Central Processing/Communication 授权问题漏洞 — CPCI85 Central Processing/CommunicationCWE-620 | 7.2 | High | 2026-07-09 |
| CVE-2026-60095 | Vinchin Backup & Recovery 缓冲区错误漏洞 — Backup & Recovery 9.0CWE-121 | 6.5 | Medium | 2026-07-09 |
| CVE-2026-60094 | Vinchin Backup & Recovery 缓冲区错误漏洞 — Backup & Recovery 9.0CWE-787 | 6.5 | Medium | 2026-07-09 |
| CVE-2026-9253 | WP Cost Estimation & Payment Forms Builder 跨站脚本漏洞 — WP Cost Estimation & Payment Forms BuilderCWE-79 | 7.2 | High | 2026-07-09 |
| CVE-2026-56291 | Balbooa Forms extension for Joomla 任意文件上传漏洞 — balbooa.com Balbooa Forms extension for JoomlaCWE-434 | 10.0 | Critical | 2026-07-09 |
| CVE-2026-59692 | GStreamer 缓冲区错误漏洞 — Red Hat Enterprise Linux 10CWE-121 | 7.5 | High | 2026-07-09 |
| CVE-2026-9021 | WordPress Easy Invoice 授权问题漏洞 — Easy Invoice – Invoice Generator, PDF Quotes & PaymentsCWE-862 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-4275 | WordPress Divi Torque Lite 跨站请求伪造漏洞 — Divi Torque Lite – Divi Modules for the Divi Builder & ThemeCWE-352 | 8.8 | High | 2026-07-09 |
| CVE-2026-9027 | WordPress CorvusPay WooCommerce Payment Gateway 加密问题漏洞 — CorvusPay WooCommerce Payment GatewayCWE-347 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-9028 | WordPress CorvusPay WooCommerce Payment Gateway 授权问题漏洞 — CorvusPay WooCommerce Payment GatewayCWE-862 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-13441 | metagauss eventprime 跨站脚本漏洞 — EventPrime – Events Calendar, Bookings and TicketsCWE-79 | 7.2 | High | 2026-07-09 |
| CVE-2026-15158 | WordPress Blocksy Companion 任意文件上传漏洞 — Blocksy CompanionCWE-434 | 9.8 | Critical | 2026-07-09 |
| CVE-2026-14245 | WordPress miniOrange OTP Login, Verification and SMS Notifications 授权问题漏洞 — miniOrange OTP Login, Verification and SMS NotificationsCWE-862 | 9.8 | Critical | 2026-07-09 |
| CVE-2026-12418 | WordPress User Frontend 授权问题漏洞 — User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User RegistrationCWE-639 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-13450 | WordPress GamiPress 授权问题漏洞 — GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPressCWE-639 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-13334 | kitae-park Mang Board WP 跨站脚本漏洞 — Mang Board WPCWE-79 | 6.1 | Medium | 2026-07-09 |
| CVE-2026-12406 | WordPress User Frontend 授权问题漏洞 — User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User RegistrationCWE-862 | 5.3 | Medium | 2026-07-09 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22856 条 CVE 漏洞。