issabel foundation News Articles

Recent news articles refferecing the vendors vulnerabilities.

favicon imageWebpronews

Hard-Coded JWT Secret in Issabel PBX Opens Door to Unauthenticated Server Takeover

Attackers are exploiting CVE-2026-89026 in the Issabel Framework by forging JWT tokens with a hard-coded secret, achieving unauthenticated RCE on PBX systems via Asterisk. Shadowserver detected activity on Sept. 9. Administrators must patch immediately to the August 1 commit.

favicon imageSwapupdate

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution - SwapUpdate

Ravie LakshmananSep 16, 2026Vulnerability / Web Security

favicon imageThe Hacker News

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Issabel Framework flaw CVE-2026-89026 is under active exploitation and can enable unauthenticated OS command execution via a hard-coded JWT key.

No more news articles to load.