CISA flags Cisco BroadWorks flaw as actively exploited in attacks
Unauthenticated XXE CVE-2026-20320 lets attackers read BroadWorks files; FCEB agencies must remediate by November 24.
78
Product
BroadWorks
- Mentions · 7d4
- Mentions · 30d4
- All mentions4
- First seenNov 10, 2026
- Last mentioned10h ago
Timeline
4 articles · newest firstAttackers exploit Openwave and Cisco BroadWorks flaws added to KEV
CISA told federal agencies to patch CVE-2026-111793 and CVE-2026-20320 by November 24 after confirmed exploitation.
78
CISA lists exploited Cisco BroadWorks and Openwave flaws in KEV
Federal civilian agencies must apply already available fixes by November 24; exploitation details are not public.
76
CISA adds Cisco BroadWorks XXE flaw to KEV (CVE-2026-20320)
An unauthenticated remote attacker can read sensitive configuration; the federal remediation due date is November 24.
80
Related CVEs
by mentions- CVE-2026-20320<1%7.5Unauthenticated XXE File Read in Cisco BroadWorks OCI-P Service
- CVE-2026-111793<1%4.3File-type restriction bypass in Openwave Webtop Media Transcoder
Appears with
- CISAorganization · 4
- Ciscovendor · 4
- Openwave Messagingvendor · 2
- Malbear Labsorganization · 2
- Webtop Media Transcoderproduct · 2
- DeepSeek Flashai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.