CVE-2026-34474: Pre-auth credential disclosure in ZTE H298A / H108N via ETHCheat