Cwe-798 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-798/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000RustFS Hardcoded gRPC Authentication Token Leading to Full Node Compromise (CVE-2025-68926)https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-68926-rustfs-grpc-token-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-68926-rustfs-grpc-token-bypass/Critical severity (CVSS 9.8) — cloud · CVE-2025-68926. Status: Weaponized. Affects: RustFS (Rust-based S3-compatible distributed object storage) — internal node-to-node gRPC service. Tags: rustfs, grpc, hardcoded-credentials, authentication-bypass, object-storage, s3-compatible, information-disclosure, credential-theft, data-destruction, cwe-798, cwe-306.cloudCriticalrustfsgrpchardcoded-credentialsauthentication-bypassobject-storages3-compatibleinformation-disclosurecredential-theftdata-destructioncwe-798cwe-306Gladinet CentreStack / Triofox Hardcoded AES Key Access-Ticket Forgery to Arbitrary File Read (CVE-2025-14611)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-14611-centrestack-triofox-file-read/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-14611-centrestack-triofox-file-read/Critical severity (CVSS 9.8) — web · CVE-2025-14611. Status: Weaponized. Affects: Gladinet CentreStack and Triofox (GladCtrl64.dll / filesvr.dn file-download handler). Tags: gladinet, centrestack, triofox, hardcoded-key, aes-256-cbc, access-ticket-forgery, arbitrary-file-read, authentication-bypass, iis-app-pool, python, cwe-798, cwe-321.webCriticalgladinetcentrestacktriofoxhardcoded-keyaes-256-cbcaccess-ticket-forgeryarbitrary-file-readauthentication-bypassiis-app-poolpythoncwe-798cwe-321FreePBX Unauthenticated UCP Access via Hard-Coded Credentials (CVE-2026-46376)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-46376-freepbx-ucp-hardcoded-creds/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-46376-freepbx-ucp-hardcoded-creds/Critical severity (CVSS 9.1) — web · CVE-2026-46376 (GHSA-m55x-h47x-v3gx). Status: PoC. Affects: FreePBX (userman module) — User Control Panel (UCP). Tags: freepbx, userman, ucp, hard-coded-credentials, cwe-798, unauthenticated-access, voip.webCriticalfreepbxusermanucphard-coded-credentialscwe-798unauthenticated-accessvoip