Cisco BroadWorks

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 19, 2026
Last mentionedSep 9, 2026

Timeline

3 articles · newest first

Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

Cisco will publish security advisories with fixed software on September 16, 2026, covering BroadWorks, ISE, Nexus Dashboard, ASA, FMC, FTD and ThousandEyes.

Cisco Security AdvisoriesSep 9, 16:00 UTC · Sep 9, 2026Advisory1

Cisco Advance Notification for Publication of August 19, 2026, Security Advisories

Cisco PSIRT's advance notice previews August 19, 2026 advisories including Critical CVSS 10.0 hardening releases for Crosswork and Secure Workload.

Cisco Security AdvisoriesAug 19, 16:00 UTC · Aug 19, 2026AdvisoryCVE-2026-20030 CVE-2026-20357 CVE-2026-20358+82

Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability

Cisco patched an XXE flaw in BroadWorks' OCI XML parser letting unauthenticated remote attackers read sensitive files from the filesystem.

Cisco Security AdvisoriesAug 19, 16:00 UTC · Aug 19, 2026Advisory1

Related CVEs

by mentions

CVE-2026-20358<1%10.0
Unauthenticated External File-System Control in Cisco Crosswork (CVSS 10.0)
published Aug 19, 2026Cisco Crosswork
CVE-2026-20357<1%10.0
Missing Authentication for Critical Functions in Cisco Crosswork
published Aug 19, 2026Cisco Crosswork
CVE-2026-20317<1%10.0
Improper Authentication Flaws in Cisco Secure Workload Score CVSS 10.0
published Aug 19, 2026Cisco Secure Workload
CVE-2026-20030<1%10.0
Unauthenticated SQL Injection (CWE-89) in Cisco Crosswork
published Aug 19, 2026Cisco Crosswork
CVE-2026-20315<1%10.0
Unauthenticated Improper Access Control in Cisco Secure Workload
published Aug 19, 2026Cisco Secure Workload
CVE-2026-20231<1%9.9
Injection vulnerabilities (CWE-74) in Cisco Secure Workload
published Aug 19, 2026Cisco Secure Workload (formerly Tetration)
CVE-2026-20318<1%9.6
Improper Input Validation Bugs in Cisco Secure Workload (CVSS 9.6)
published Aug 19, 2026Cisco Secure Workload
CVE-2026-20319<1%7.5
Buffer Management Flaws in Cisco Secure Workload Allow Remote Denial of Service
published Aug 19, 2026Cisco Secure Workload
CVE-2026-20320<1%7.5
Unauthenticated XXE File Read in Cisco BroadWorks OCI-P Service
published Aug 19, 2026Cisco BroadWorks (Open Client Interface XML Parser / OCI-P service)
CVE-2026-20327<1%6.5
Authenticated Blind SQL Injection in Cisco Unified Intelligence Center Web Interface
published Aug 19, 2026Cisco Unified Intelligence Center (web-based management interface)

Appears with

Ciscovendor · 3
ThousandEyesproduct · 1
Cisco RoomOSproduct · 1
Ciscoorganization · 1
Cisco Secure Firewall Threat Defenseproduct · 1
Cisco Secure Firewall ASAproduct · 1
Cisco Nexus Dashboardproduct · 1
Cisco Identity Services Engineproduct · 1
Cisco Crossworkproduct · 1
Cisco PSIRTorganization · 1
Cisco Secure Firewall Management Centerproduct · 1
Cisco Secure Workloadproduct · 1
Cisco Unified Intelligence Centerproduct · 1

Entities are extracted by the model from each article. First seen Aug 19, 2026, last mentioned Sep 9, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.