Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
A critical flaw in the Issabel Framework, CVE-2026-89026 with a CVSS v3.1 score of 9.8, lets unauthenticated remote attackers forge bearer tokens using a hard-coded HS256 JWT signing key found in the pbxapi index.php file and identical across every...