{
  "id": 19456079,
  "title": "Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches",
  "url": "https://urgent.news/2026/11/11/cisco-broadworks-and-openwave-flaws-actively-exploited-despite",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-11T06:04:02.000Z",
  "source": {
    "name": "The Hacker News",
    "slug": "the-hacker-news",
    "url": "https://thehackernews.com/2026/11/cisco-broadworks-and-openwave-flaws.html"
  },
  "original_language": "en",
  "account": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog to include two security flaws in Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder. These vulnerabilities, CVE-2026-20127 and CVE-2026-76418, respectively, have been actively exploited in the wild, according to Cisco's advisory. The CVSS scores for these vulnerabilities are 10.0 and 8.6, respectively. While the exact methods of exploitation are unknown and no specific threat actor has been identified, the vulnerabilities are undoubtedly being leveraged for malicious purposes. Federal Civilian Executive Branch (FCEB) agencies are urged to apply the available patches by November 24, 2026, to safeguard their networks.",
  "summary": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Details of the vulnerabilities are below - CVE-2026-20320 (CVSS score: 7.5) - An improper restriction of XML external entity",
  "key_points": [
    "Two Cisco and Openwave vulnerabilities actively exploited",
    "CVE-2026-20127 and CVE-2026-76418 identified",
    "FCEB agencies urged to patch by November 24"
  ],
  "editors_take": "The active exploitation of these high-severity flaws despite existing patches highlights a critical window of vulnerability for federal agencies that fail to prioritize immediate software updates.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}