Vulnerability
Published 2026-11-10
Verified 2026-10-24
Cisco BroadWorks (CVE-2026-20320)
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability. Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. Apply vendor mitigations.
Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- Cisco BroadWorks
- Exploited in Australia?
- unknown
- Primary: NVD
- Vendor: CISA KEV
- CVE: CVE-2026-20320
