#hard-coded credentials

Hackers Are Actively Exploiting a Critical Issabel Flaw That Hands Over Full Server Control

CVE-2026-89026 lets unauthenticated attackers run any command they want on vulnerable phone-system servers. Attacks are already happening.