CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

175 matches found

Cvelist•added 2026/09/15 4:41 p.m.•68 views

CVE-2026-89026 Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate

The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...

9.8CVSS0.00685EPSS

SaveExploits2References2

CVE•added 2026/09/15 4:41 p.m.•139 views

CVE-2026-89026

Issabel Framework (web framework for Issabel PBX) contained a hard-coded HS256 JWT signing key in pbxapi/index.php, identical across all installations. Unauthenticated attackers could forge valid bearer tokens and call /pbxapi/manager/originate with the System application parameter, causing Aster...

9.8CVSS6.7AI score0.00685EPSS

SaveIn wildExploits2References2

Positive Technologies•added 2026/09/15 12:00 a.m.•29 views

PT-2026-92132

Name of the Vulnerable Software and Affected Versions Issabel Framework versions prior to commit b97dbaf Description The Issabel Framework contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across all installations. This allows unauthenticated remote...

9.8CVSS6.3AI score0.00685EPSS

SaveExploits2References34

Rapid7 Vulnerability Database (full)•added 2026/09/15 12:00 a.m.•17 views

CVE-2026-89026: Use of Hard-coded Cryptographic Key

9.8CVSS6.7AI score0.00685EPSS

SaveExploits2References2

VulnCheck KEV•added 2026/09/15 12:00 a.m.•19 views

VulnCheck KEV: CVE-2026-89026

9.8CVSS6.7AI score0.00685EPSS

SaveIn wildExploits2References3

EUVD•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-20852

Malware in sbrugna...

4.8CVSS5.7AI score0.00638EPSS

SaveExploits1References3

EUVD•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-32008