Confirmed 85ExploitedPatch availableFirst seen 11 Nov 2026, 06:04 UTC

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

Coverage

Headline	Source	Type	Published
Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches	The Hacker News	Security press	11 Nov 2026, 06:04 UTC
Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities	SecurityWeek	Security press	11 Nov 2026, 09:01 UTC

Vulnerabilities and remediation

CVE-2026-20320 No fix known yetExploited (CISA KEV) CVSS pending · EPSS 0.4%

Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability

Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for… Due 24 Nov 2026 (US federal deadline)
Your version: Check if your Cisco BroadWorks version is affected →
Checked: Vendor record (cisco) checked 5 h ago

CVE-2026-111793 Patch availableExploited (CISA KEV) CVSS pending · EPSS 0.3%

Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability

Fixed in: Webtop Media Transcoder 1.1.22.0
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for… Due 24 Nov 2026 (US federal deadline)
Your version: Check if your Webtop Media Transcoder version is affected →
Checked: Vendor record (mitre) checked 5 h ago

Fix status, versions and advisories from NVD; required actions from CISA. EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days. Always confirm with the vendor advisory.

Why this score

Confidence	85 · Confirmed
Most trusted source	70
Independent organisations reporting it (2)	+5
Confirmed by an official source or CISA KEV	+10

We link to the original reporting and don’t reproduce it. Read the sources above for the full details.