CVE-2026-20320
Known exploited · CISA KEV
CVSS 7.5 HIGH: a vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated… EPSS 0.8% (58th percentile).
CISA federal remediation date Nov 24
Vulnerabilities & Exploits
CISA added CVE-2026-20320, a Cisco BroadWorks flaw, to its Known Exploited Vulnerabilities catalog Tuesday, saying attackers are exploiting it.
BroadWorks parses XML through its Open Client Interface (OCI), and the flaw lets a remote caller read sensitive configuration without signing in. That can reveal deployment details, but the reporting does not establish what attackers accessed or show that the flaw provides system control or exposes credentials.
For telecom providers running BroadWorks, exposed configuration could help inform follow-on targeting, while the public account leaves open whether any information was actually read. A patched system therefore would not, by itself, settle the history of access.
1 source · Nov 11
Known exploited · CISA KEV
CVSS 7.5 HIGH: a vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated… EPSS 0.8% (58th percentile).
CISA federal remediation date Nov 24
BleepingComputer
CISA flags Cisco BroadWorks flaw as actively exploited in attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability in attacks.
originalPart of the PlainSec briefing for 2026-11-11
Every edition of this story: Cisco BroadWorks flaw exploited to read configuration