GoKawiilCISA adds Cisco BroadWorks flaw CVE-2026-20320 to exploited vulnerabilities list
CISA confirmed active exploitation of a high-severity flaw in Cisco BroadWorks, a cloud platform telecom carriers and MSPs use to deliver hosted PBX and collaboration services. The bug, an XXE weakness in the Open Client Interface XML Parser, lets unauthenticated remote attackers extract sensitive configuration data via crafted XML messages, and Cisco patched it in August. CISA has added it to its Known Exploited Vulnerabilities Catalog and ordered federal agencies to remediate by November 24 under Binding Operational Directive 26-04.