Skip to content
OpenAdvisories

Vendor

Issabel Foundation

2 known vulnerabilities.

Products

PBX 1 Issabel Framework 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-89026 Public exploit Scanner template

    Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate

    The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to …

    Issabel Foundation Issabel Framework