Issabel Foundation vulnerabilities
We track 1 vulnerability in Issabel Foundation products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Issabel Foundation vulnerabilities
- 9.8 Critical severity
Issabel Framework: Use of Hard-coded Cryptographic Key
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to f