CISA adds Cisco BroadWorks XXE flaw to KEV (CVE-2026-20320)
An unauthenticated remote attacker can read sensitive configuration; the federal remediation due date is November 24.
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #broadworks
Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
Cisco patched a BroadWorks CommPilot authorization bypass letting low-privileged authenticated users alter device configurations via crafted HTTP requests.
Cisco Advance Notification for Publication of August 19, 2026, Security Advisories
Cisco PSIRT's advance notice previews August 19, 2026 advisories including Critical CVSS 10.0 hardening releases for Crosswork and Secure Workload.
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
Cisco patched an XXE flaw in BroadWorks' OCI XML parser letting unauthenticated remote attackers read sensitive files from the filesystem.