I'm having hard time trying to think of something as bad as this flaw.

Debian ssh key predictable random number generator (CVE-2008-0166) or heartbleed (CVE-2014-0160) comes to mind.