Issabel Authenticated Remote Code Execution (CVE-2024-0986)

CVEs

9.8 Critical Severity

Apps

Screenshots from the blog posts

CVE-2024-0986 is a critical OS command injection vulnerability in Issabel PBX 4.0.0's Asterisk-Cli component, allowing remote exploits.