Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Issabel PBX JWT Key Flaw Enables Unauthenticated Remote Code Execution
Excerpt
A critical vulnerability in the Issabel Framework could allow unauthenticated remote attackers to execute arbitrary operating-system commands on affected Issabel PBX deployments by exploiting a hard-coded JSON Web Token signing key. Tracked as CVE-2026-89026, the vulnerability affects Issabel Framework versions prior to commit b97dbaf0b71c1c36f841e672b664afbeb02773bd . The issue carries a CVSS v4 score of 9.3 and is classified as CWE-321, “Use of Hard-coded Cryptographic…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-89026 | Medium | Score 51/100 | First seen |
| SHA1 | b97dbaf0b71c1c36f841e672b664afbeb02773bd | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…