Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

2026-09-18

A critical flaw, CVE-2026-89026, in the Issabel Framework allows unauthenticated attackers to forge JWT bearer tokens, leading to operating system command execution.