{"uuid": "33ec2aa7-f4d4-45d9-8ac4-222fe71fe6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117283163293011954", "content": "\u203c\ufe0f Attackers are exploiting a critical Issabel Framework flaw.\nCVE-2026-89026 uses a hard-coded JWT signing key, letting unauthenticated remote attackers forge tokens and execute OS commands as the Asterisk user. A fix is available.\nHow the flaw works: https://thehackernews.com/2026/09/attackers-exploit-issabel-framework.html", "creation_timestamp": "2026-09-16T22:50:49.616282Z"}