Cwe-321

Flowise Enterprise Authentication Bypass via Hardcoded Default JWT Secrets (CVE-2026-56271) newCVE-2026-56271webCRITICAL 9.8Patched2026-07-12Gladinet CentreStack / Triofox Hardcoded AES Key Access-Ticket Forgery to Arbitrary File Read (CVE-2025-14611) new KEV EPSS 53%CVE-2025-14611webCRITICAL 9.8Unverified2026-07-06Lansweeper lsrunase 2.0 / lsencrypt 2.0 — RC4 Password Recovery (CVE-2026-39031) newCVE-2026-39031cryptoHIGHUnverified2026-07-05HAXcms Node.js Private Key Disclosure via Broken HMAC (CVE-2026-46395) newCVE-2026-46395webCRITICAL 9.8Patched2026-07-05