Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
2026-09-17T07:24:01Z•48fcd6ce1a7261db668f60de10619d66bb1ef79fa5a4fd1e4ebef21ccccd2a19
CVE-2026-5430CVE-2026-58704CVE-2026-76461CVE-2026-87886CVE-2026-89026AI securityAcronisCisco Secure Email GatewayGiteaLiteSpeedPBXPixelWSO2 API ManagerWordPressaccount takeoveractive exploitationauthentication bypassbackdoorsbanking malwarebrowser extensionscredential theftidentity attacksphishingprivilege escalationransomwareremote code executionunauthenticated accessweb shellwiperszero-day
What happened
The document aggregates security news from September 14–16, 2026, with a strong focus on actively exploited vulnerabilities and fast-moving attack campaigns. Notable incidents include unauthenticated remote command execution in Issabel, Cisco Secure Email Gateway, WooCommerce Wholesale Lead Capture, and potentially Gitea; authentication bypass and account takeover in WSO2 API Manager; privilege escalation in Pixel Modem, Acronis cPanel Backup, Parallels Desktop, and LiteSpeed Enterprise; and campaigns involving phishing, browser and AI-assistant hijacking, malware, ransomware, wipers, cloud-으면
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 48fcd6ce1a7261db668f60de10619d66bb1ef79fa5a4fd1e4ebef21ccccd2a19
- Enrichment time
- 2026-09-17T07:24:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.