Home / Nov 12, 2026 / Story
0
#5 The Hacker News general November 11, 2026 at 06:04 UTC

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

By [email protected] (The Hacker News)

AI Summary

CISA added two actively exploited vulnerabilities to its KEV catalog: CVE-2026-20320 (CVSS 7.5), an XXE flaw in Cisco BroadWorks, and CVE-2026-111793 in Openwave Messaging Webtop Media Transcoder, both allowing sensitive configuration data leakage. Federal agencies have a mandatory remediation deadline, and organizations running either platform should apply available patches without delay.

Relevance score: 85.0/100

# More from November 12