NewsSecurityWeek
Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
Teaser from the source
The flaws, CVE-2026-111793 and CVE-2026-20320, let attackers leak sensitive information, including configuration data. The post Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekLinked advisories
- CVE-2026-20320Eine Schwachstelle im Open Client Interface (OCI) XML Parser von Cisco BroadWorks könnte es einem unauthentifizierten, entfernten Angreifer ...
- CVE-2026-111793Openwave Messaging Limited Webtop Media Transcoder — Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
- CVE-2026-20320Cisco BroadWorks — Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
- CVE-2026-20320Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
- CVE-2026-111793Openwave Messaging (Ireland) Webtop Media Transcoder: fehlerhafte Ressourcenübergabe
- CVE-2026-111793Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an …
- CVE-2026-20320A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configura…
Affected vendors and products
More on BroadWorks
Other advisories
- MediumCVE-2026-76438Eine Schwachstelle in der webbasierten Verwaltungsoberfläche der Cisco BroadWorks CommPilot-Anwendung könnte es einem authentifizierten, ent...
- MediumCVE-2026-76438Eine Schwachstelle in der webbasierten Verwaltungsoberfläche der Cisco BroadWorks CommPilot-Anwendung könnte es einem authentifizierten, ent...
- MediumCVE-2026-76438A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with l…
- MediumCVE-2026-76438Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
- CriticalCVE-2026-20320Cisco BroadWorks: XML-External-Entity-Injection (XXE)
- CriticalCVE-2026-20320Eine Schwachstelle im Open Client Interface (OCI) XML Parser von Cisco BroadWorks könnte es einem unauthentifizierten, entfernten Angreifer ...
- CriticalCVE-2026-20320A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configura…
- CriticalCVE-2026-20320Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
Other news entries
- CISA flags Cisco BroadWorks flaw as actively exploited in attacksNewsBleepingComputer
- Angriffe auf Cisco BroadWorks, Barracuda ESG und weitere Produkte beobachtetNewsheise Security
- Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available PatchesNewsThe Hacker News
- Cisco-Sicherheitslücken: Angreifer können Anmeldung von Secure Workload umgehenNewsheise Security
- Cisco BroadWorks CommPilot Application Software Authorization Bypass VulnerabilityNewsCisco PSIRT
- Cisco BroadWorks Out-of-Band Blind XML External Entity Injection VulnerabilityNewsCisco PSIRT
Source: https://www.securityweek.com/threat-actors-exploit-openwave-cisco-broadworks-vulnerabilities/
ID