A critical security flaw carrying a CVSS score of 9.8 in the Issabel Framework is currently under active exploitation in the wild. The vulnerability allows unauthenticated remote attackers to execute arbitrary operating system commands on affected PBX unified communications software due to a hard-coded implementation issue. Administrators must immediately apply available patches or restrict network exposure to prevent compromise.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →