CVE-2026-89026

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 16, 2026

Last Seen

September 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical WSO2 API Manager Vulnerability Under Active Exploitation80.8

A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffi...

Critical Vulnerability in Issabel Framework Allows Remote Code Execution78.0

A severe vulnerability (CVE-2026-89026) in the Issabel Framework has been identified, allowing unauthenticated remote attackers to execute arbitrary OS commands. The flaw stems from a hard-coded JSON Web Token (JWT) signing key in the pbxapi/index.php file, which is identical across all installation...