CISA lists exploited Cisco BroadWorks and Openwave flaws in KEV
Original title: Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches
Federal civilian agencies must apply already available fixes by November 24; exploitation details are not public.
CISA added two flaws to the Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. CVE-2026-20320, CVSS 7.5, is an XML external entity flaw in Cisco BroadWorks that can let an unauthenticated remote attacker read sensitive configuration as the BroadWorks user. CVE-2026-111793, CVSS 4.3, in Openwave Messaging Webtop Media Transcoder can let an authenticated user process unintended document types. Fixes shipped in August and October 2026. Federal Civilian Executive Branch agencies should patch by November 24, 2026.
Unconfirmed: Exploitation methods and attribution are undisclosed, and Cisco’s advisory does not mention malicious use.
- BroadWorks was fixed in August 2026; Openwave was fixed in October 2026.
- No public details describe how either flaw is being exploited.
- Neither issue is attributed to a named threat actor.
- Cisco’s advisory does not mention malicious use of the BroadWorks flaw.
Impact: Read BroadWorks configuration or convert unintended documents
| Product | Affected |
|---|---|
| Cisco BroadWorks | — |
| Openwave Messaging Webtop Media Transcoder | — |
- 1.Apply the available Cisco BroadWorks and Openwave fixes.
- 2.Federal civilian agencies should patch by November 24, 2026.
- Vendors
- CiscoOpenwave Messaging
- Organizations
- CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-111793 | File-type restriction bypass in Openwave Webtop Media Transcoder | 4.3 | <1% | KEV | KEV |
| CVE-2026-20320 | Unauthenticated XXE File Read in Cisco BroadWorks OCI-P Service | 7.5 | <1% | KEVPoC | KEV |
From the original article
1 min read at thehackernews.com
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.