Security5 dSeptember 16, 2026, 22:50

Attackers exploit Issabel Framework flaw enabling unauthenticated OS command execution

A critical vulnerability CVE-2026-89026 (CVSS 9.8/9.3) has been found in the Issabel Framework, a web framework for an open-source PBX system. An unauthenticated remote attacker can execute arbitrary OS commands, and the vulnerability is already being actively exploited.

The Hacker News Open source

CVE-2026-89026: CVSS v3.1 — 9.8, CVSS v4.0 — 9.3
Allows OS command execution without authentication
Vulnerability is already actively exploited in attacks

#Issabel

Google Releases AndroidX Libraries for Granular Android Patch Checks

Security

Surfshark: iPhone lets you delete 98% of preinstalled apps, Google only 38%

Security

Hackers extract 1.6 million images and 27,000 videos from a single Flock camera

Security

Attackers exploit Issabel Framework flaw enabling unauthenticated OS command execution

Google Releases AndroidX Libraries for Granular Android Patch Checks

Surfshark: iPhone lets you delete 98% of preinstalled apps, Google only 38%

Hackers extract 1.6 million images and 27,000 videos from a single Flock camera

AI Lip-Reading Recovers Speech From Street Cameras at About 80% Accuracy