Cwe-798

RustFS Hardcoded gRPC Authentication Token Leading to Full Node Compromise (CVE-2025-68926) new EPSS 31%CVE-2025-68926cloudCRITICAL 9.8Patched2026-07-06Gladinet CentreStack / Triofox Hardcoded AES Key Access-Ticket Forgery to Arbitrary File Read (CVE-2025-14611) new KEV EPSS 53%CVE-2025-14611webCRITICAL 9.8Unverified2026-07-06FreePBX Unauthenticated UCP Access via Hard-Coded Credentials (CVE-2026-46376) newCVE-2026-46376webCRITICAL 9.1Patched2026-07-05