Critical Issabel PBX Command Execution Vulnerability Exploited in the Wild

A critical vulnerability in the Issabel Framework, which supports Issabel PBX deployments, is being actively exploited in the wild. The flaw, tracked as CVE-2026-89026, allows unauthenticated remote attackers to execute OS commands on vulnerable PBX servers by forging authentication tokens. VulnCheck rated the issue critical with a CVSS v4 score... Weiterlesen