A critical vulnerability in the Issabel Framework, which supports Issabel PBX deployments, is being actively exploited in the wild. The flaw, tracked as CVE-2026-89026, allows unauthenticated remote attackers to execute OS commands on vulnerable PBX servers by forging authentication tokens. VulnCheck rated the issue critical with a CVSS v4 score of 9.3. The vulnerability affects […]
The post Critical Issabel PBX Command Execution Vulnerability Exploited in the Wild appeared first on Cyber Security News.