Issabel Framework vulnerabilities

1 known vulnerability in Issabel Framework from Issabel Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Issabel Framework: Use of Hard-coded Cryptographic Key

  CVE-2026-89026Sep 15, 2026Issabel FoundationEPSS 2.7%

  The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to f