Recent revelations by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) have highlighted significant security concerns involving Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder. CISA has identified active exploitation of these vulnerabilities, urging immediate attention and action.
Details of the Cisco BroadWorks Vulnerability
The vulnerability identified as CVE-2026-20320, scoring 7.5 on the CVSS scale, is linked to an improper restriction of XML external entity reference in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks. This flaw allows remote, unauthenticated attackers to access sensitive configuration data on compromised systems. Despite a fix released in August 2026, exploitation persists.
Openwave Messaging Webtop Transcoder Issues
In addition, the Openwave Messaging Webtop Media Transcoder has been discovered to have a vulnerability, labeled CVE-2026-111793, with a CVSS score of 4.3. This flaw involves incorrect resource transfer between spheres, permitting authenticated users to process unintended document types, circumventing Webmail experiences. The issue was addressed in October 2026, yet exploitation continues.
Implications and Recommendations
Though specific attack details remain undisclosed, and no particular threat actors have been identified, the urgency for remediation is clear. Cisco’s recent advisories about other vulnerabilities, including those in Catalyst SD-WAN and Secure Firewall Software, underscore the critical need for vigilance.
Federal Civilian Executive Branch (FCEB) agencies have been strongly advised to apply the relevant patches by November 24, 2026, to safeguard their networks against these active threats.
In conclusion, as malicious entities actively exploit these vulnerabilities, organizations must prioritize patch management and maintain robust security postures to mitigate potential risks effectively.
