CVE-2026-89026

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 16, 2026

Last Seen

September 16, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CVE-2026-89026 in Issabel Framework Under Active Exploitation78.0

A severe vulnerability (CVE-2026-89026) in the Issabel Framework has been discovered, allowing unauthenticated remote attackers to execute arbitrary OS commands. This flaw stems from a hard-coded JSON Web Token (JWT) signing key, which can be exploited to forge valid bearer tokens. The vulnerability...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical CVE-2026-89026 in Issabel Framework Under Active Exploitation

4h ago·2 sources

Related Entities

Zero-day Exploit CWE-287 - Improper Authentication CWE-798 - Use of Hard-coded Credentials T1059 - Command and Scripting Interpreter Asterisk Issabel Framework

CVE-2026-89026

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical CVE-2026-89026 in Issabel Framework Under Active Exploitation

Related Articles (1)

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Related Entities