A critical security flaw, CVE-2026-89026 (CVSS 9.8), in the Issabel Framework is being actively exploited. This vulnerability allows an unauthenticated remote attacker to execute arbitrary operating system commands due to a hard-coded credential issue. Organizations using Issabel Framework should apply patches immediately to prevent compromise.