tag
Cwe-798
Critical
RustFS Hardcoded gRPC Authentication Token Leading to Full Node Compromise (CVE-2025-68926)
CVE-2025-68926·
RustFS (Rust-based S3-compatible distributed object storage) — internal node-to-node gRPC service
unpatched
Critical
Gladinet CentreStack / Triofox Hardcoded AES Key Access-Ticket Forgery to Arbitrary File Read (CVE-2025-14611)
CVE-2025-14611·
Gladinet CentreStack and Triofox (GladCtrl64.dll / filesvr.dn file-download handler)
unpatched
Critical
FreePBX Unauthenticated UCP Access via Hard-Coded Credentials (CVE-2026-46376)
CVE-2026-46376 (GHSA-m55x-h47x-v3gx)·
FreePBX (userman module) — User Control Panel (UCP)
patched