Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-16 15:50 UTC
Importiert: 2026-09-22 19:13 UTC
CVSS: 9.8
Quelle-ID: thn_global
uid_hash: fa0ccebd2cd0f7852aa05c63e214cd2ec95f78a56ea2b838fb59ec33282b8202

The Hacker News

Inhalt

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation.

The vulnerability in question is CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3), which can allow an unauthenticated remote attacker to execute arbitrary operating system (OS) commands by taking advantage of a hard-coded

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-89026	CRITICAL	9.8	CRITICAL	9.8			2026-09-15

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste