O
Sep 26, 2026One Key for Every PBX: The Issabel Framework Hardcoded JWT Flaw (CVE-2026-89026)
Why a single hardcoded HS256 key in Issabel Framework turned an open-source PBX into an unauthenticated command execution target.
Sep 26, 20262 min read0 reactions0 comments