目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

type:auth-bypass 标签下的 CVE 漏洞 2125

type:auth-bypass 类型相关 2125 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

type:auth-bypass 标签标识了身份验证绕过漏洞,指攻击者无需合法凭证即可访问受限资源或执行特权操作。此类漏洞极具危害性,因直接破坏系统核心安全防线,可能导致数据泄露、未授权操作甚至完全控制服务器。典型场景包括利用逻辑缺陷绕过登录验证、伪造会话令牌或滥用API权限校验缺失。鉴于其广泛影响,该类别涵盖1739个CVE,凸显了修复认证机制缺陷在网络安全中的紧迫性与重要性。

CVE ID标题CVSS风险等级Published
CVE-2026-16578 Admin Safety Guard <1.4.0 未授权用户数据泄露漏洞 — Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection--2026-08-08
CVE-2026-48039 Meta Ads MCP未授权HTTP工具执行泄露操作者访问令牌漏洞 — meta-ads-mcpCWE-287 9.1 Critical2026-08-07
CVE-2026-11430 Grav CMS 调度器Webhook认证绕过漏洞 — grav-plugin-scheduler-webhookCWE-303 7.3 High2026-08-07
CVE-2026-48088 open-reception appointment-booking-software 授权问题漏洞 — appointment-booking-softwareCWE-862 9.4 Critical2026-08-06
CVE-2026-70636 FlowiseAI Flowise 授权问题漏洞 — FlowiseCWE-862 7.5 High2026-08-06
CVE-2026-70558 Dinky 未授权任意文件写入漏洞 — DinkyCWE-434 9.8 Critical2026-08-06
CVE-2026-19064 SourceCodester Online Examination & Learning Management System 授权问题漏洞 — Online Examination & Learning Management SystemCWE-639 4.3 Medium2026-08-06
CVE-2026-71326 Traefik 授权问题漏洞 — traefikCWE-287 2.1 Low2026-08-06
CVE-2026-5423 Subscription 连接参数 JWT 认证绕过漏洞 — graphqlCWE-302 8.2 High2026-08-06
CVE-2026-53977 OpenChamber 1.11.7 未授权拒绝服务漏洞 — OpenChamberCWE-306 7.5 High2026-08-06
CVE-2026-65570 WordPress 手机号登录插件 <=1.8.70 绕过漏洞 — Login with phone numberCWE-290 8.1 High2026-08-06
CVE-2026-32469 WordPress CAPTCHA 4WP <= 7.6.0 验证码绕过漏洞 — CAPTCHA 4WPCWE-290 5.3 Medium2026-08-06
CVE-2026-53976 OpenChamber 路径遍历漏洞 — OpenChamberCWE-22 9.1 Critical2026-08-06
CVE-2026-65583 Apache CXF 自颁发ID令牌声明验证跳过漏洞 — Apache CXFCWE-345--2026-08-06
CVE-2026-15459 wpmudev WPMU DEV Dashboard 授权问题漏洞 — WPMU DEV DashboardCWE-287 8.1 High2026-08-06
CVE-2026-8446 IBM Langflow OSS 授权问题漏洞 — Langflow OSSCWE-306 7.5 High2026-08-05
CVE-2026-9192 Progress MarkLogic Server 授权问题漏洞 — MarkLogic ServerCWE-287 9.8 Critical2026-08-05
CVE-2026-71289 NASA AMMOS ANMS 授权问题漏洞 — anmsCWE-306 9.8 Critical2026-08-05
CVE-2026-71273 openshwprojects OpenBK7231T 跨站请求伪造漏洞 — OpenBK7231T_AppCWE-352 6.5 Medium2026-08-05
CVE-2026-61891 Eclipse Theia 信息泄露漏洞 — Eclipse TheiaCWE-22 7.5 High2026-08-05
CVE-2026-71248 Harsh Patel Inventory Management System in PHP SQL注入漏洞 — Inventory-Management-System-PHPCWE-89 9.8 Critical2026-08-05
CVE-2026-71231 Brad Sanders IOTSmartHome PHP SQL注入漏洞 — IOTSmartHomeCWE-89 9.8 Critical2026-08-05
CVE-2026-54418 Leantime 授权问题漏洞 — LeantimeCWE-862 8.1 High2026-08-05
CVE-2025-63823 Safetipin My Safetipin 安全漏洞 — n/a--2026-08-05
CVE-2026-70479 Open WebUI 服务端请求伪造漏洞 — open-webuiCWE-918 7.7 High2026-08-04
CVE-2026-70552 MaxSite CMS 授权问题漏洞 — MaxSite CMSCWE-306 9.8 Critical2026-08-04
CVE-2026-69250 FlowiseAI Flowise 授权问题漏洞 — FlowiseCWE-639 8.5 High2026-08-04
CVE-2026-61514 Puwell IP Camera 授权问题漏洞 — IP CameraCWE-306 9.8 Critical2026-08-04
CVE-2026-69246 Guzzle 处理逻辑错误漏洞 — guzzleCWE-180 7.2 High2026-08-03
CVE-2026-48031 dhax Go Restful API Boilerplate 信任管理问题漏洞 — go-baseCWE-798 9.1 Critical2026-08-03

type:auth-bypass 是常见的弱点类别,本平台收录该类弱点关联的 2125 条 CVE 漏洞。