Vulnerability
Published 2026-11-10
Verified 2026-10-24

Cisco BroadWorks (CVE-2026-20320)

Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability. Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. Apply vendor mitigations.

Check the NVD record and the vendor advisory for affected versions and the patch.

Product
Cisco BroadWorks
Exploited in Australia?
unknown

vulnerabilities