cve recordzero dayexploit reported

CVE-2026-89026

CVSS—

Severitynone

Weakness—

EPSS2.7%85.9th percentile

Exploited1 KEV source

patch window

Called exploited the same day it was disclosed.

Measured from the CVE publication date to the earliest of 1 KEV catalogue that list it.

The life of this vulnerability

CVE reservedSep 10, 2026
CVE publishedSep 15, 20265d
First KEV listingSep 15, 2026same day
Last sightingSep 15, 2026same day

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

CISA KEVUS federaldoes not list it
EUVDENISA, European Uniondoes not list it
VulnCheck KEVcommercial researchlisted Sep 15, 2026
CIRCLaggregator, mirrors the abovelisted Sep 15, 2026, not counted

Sources1 of 3

Listings differ by—

Strongest claimconfirmed

This rests on a single catalogue. No second catalogue corroborates the claim that it is being exploited. CIRCL is an aggregator and is not counted.

Public exploitation evidence

reported exploitationSep 15, 2026www.cve.org/CVERecord?id=CVE-2026-89026

1 public report collected from VulnCheck and CIRCL, first on Sep 15, 2026. Each links to its original source. We have not verified them.

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2026-89026

CVE-2026-89026Sep 16, 2026critical

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Attackers are actively exploiting a critical vulnerability in the Issabel Framework, a web-based component of the open-source unified communications PBX software. This flaw, identified as CVE-2026-89026, allows for unauthenticated remote operating system (OS) command execution, posing a significant risk to affected systems.