access:pre-auth 类型相关 23142 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-60095 | Vinchin Backup & Recovery 缓冲区错误漏洞 — Backup & Recovery 9.0CWE-121 | 6.5 | Medium | 2026-07-09 |
| CVE-2026-60094 | Vinchin Backup & Recovery 缓冲区错误漏洞 — Backup & Recovery 9.0CWE-787 | 6.5 | Medium | 2026-07-09 |
| CVE-2026-9253 | WP Cost Estimation & Payment Forms Builder 跨站脚本漏洞 — WP Cost Estimation & Payment Forms BuilderCWE-79 | 7.2 | High | 2026-07-09 |
| CVE-2026-56291 | Balbooa Forms extension for Joomla 任意文件上传漏洞 — balbooa.com Balbooa Forms extension for JoomlaCWE-434 | 10.0 | Critical | 2026-07-09 |
| CVE-2026-59692 | GStreamer 缓冲区错误漏洞 — Red Hat Enterprise Linux 10CWE-121 | 7.5 | High | 2026-07-09 |
| CVE-2026-9021 | WordPress Easy Invoice 授权问题漏洞 — Easy Invoice – Invoice Generator, PDF Quotes & PaymentsCWE-862 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-4275 | WordPress Divi Torque Lite 跨站请求伪造漏洞 — Divi Torque Lite – Divi Modules for the Divi Builder & ThemeCWE-352 | 8.8 | High | 2026-07-09 |
| CVE-2026-9027 | WordPress CorvusPay WooCommerce Payment Gateway 加密问题漏洞 — CorvusPay WooCommerce Payment GatewayCWE-347 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-9028 | WordPress CorvusPay WooCommerce Payment Gateway 授权问题漏洞 — CorvusPay WooCommerce Payment GatewayCWE-862 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-13441 | metagauss eventprime 跨站脚本漏洞 — EventPrime – Events Calendar, Bookings and TicketsCWE-79 | 7.2 | High | 2026-07-09 |
| CVE-2026-15158 | WordPress Blocksy Companion 任意文件上传漏洞 — Blocksy CompanionCWE-434 | 9.8 | Critical | 2026-07-09 |
| CVE-2026-14245 | WordPress miniOrange OTP Login, Verification and SMS Notifications 授权问题漏洞 — miniOrange OTP Login, Verification and SMS NotificationsCWE-862 | 9.8 | Critical | 2026-07-09 |
| CVE-2026-12418 | WordPress User Frontend 授权问题漏洞 — User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User RegistrationCWE-639 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-13450 | WordPress GamiPress 授权问题漏洞 — GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPressCWE-639 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-13334 | kitae-park Mang Board WP 跨站脚本漏洞 — Mang Board WPCWE-79 | 6.1 | Medium | 2026-07-09 |
| CVE-2026-12406 | WordPress User Frontend 授权问题漏洞 — User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User RegistrationCWE-862 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-31984 | Nozomi Networks Guardian 资源管理错误漏洞 — GuardianCWE-770 | 7.5 | High | 2026-07-09 |
| CVE-2026-31983 | Nozomi Networks Guardian 授权问题漏洞 — GuardianCWE-306 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-31982 | Nozomi Networks Guardian 输入验证错误漏洞 — GuardianCWE-601 | 7.1 | High | 2026-07-09 |
| CVE-2026-15000 | WordPress Connect Contact Form 7 and Mailchimp 跨站脚本漏洞 — Connect Contact Form 7 and MailchimpCWE-79 | 7.2 | High | 2026-07-09 |
| CVE-2026-7558 | WordPress Age Verification & Identity Verification by Token of Trust 授权问题漏洞 — Age Verification & Identity Verification by Token of TrustCWE-862 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-12270 | WordPress Everest Forms 授权问题漏洞 — Everest Forms | - | - | 2026-07-09 |
| CVE-2026-12516 | stefanbohacek Fediverse Embeds 服务端请求伪造漏洞 — Fediverse Embeds | - | - | 2026-07-09 |
| CVE-2026-12517 | stefanbohacek Fediverse Embeds 服务端请求伪造漏洞 — Fediverse Embeds | - | - | 2026-07-09 |
| CVE-2026-11571 | WordPress Everest Forms 信息泄露漏洞 — Everest Forms | - | - | 2026-07-09 |
| CVE-2026-11869 | WordPress WP DSGVO Tools 授权问题漏洞 — WP DSGVO Tools (GDPR) | - | - | 2026-07-09 |
| CVE-2026-11875 | WordPress WP Support Plus Responsive Ticket System 授权问题漏洞 — WP Support Plus Responsive Ticket System | - | - | 2026-07-09 |
| CVE-2026-51598 | Mercury MIPC252W IP Camera 输入验证错误漏洞 — n/a | - | - | 2026-07-09 |
| CVE-2026-51599 | MERCURY MIPC252W 安全漏洞 — n/a | - | - | 2026-07-09 |
| CVE-2026-51600 | Tenda cp3 资源管理错误漏洞 — n/a | - | - | 2026-07-09 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 23142 条 CVE 漏洞。