Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
Wed Sep 16 2026
Exploit
Open Source
Telecom
Vulnerability
feeds.feedburner.com
A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation.
The vulnerability in question is CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3), which can allow an unauthenticated remote attacker to execute arbitrary operating system (OS) commands by taking advantage of a hard-coded