KNOWN EXPLOITED VULNERABILITY DOSSIER
CVE-2026-20320
Cisco · BroadWorks
Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system.
Correlated Federal Court Cases & Exploitation Context (0)
No federal court indictment in the current archive directly cites CVE-2026-20320. This record tracks its addition to the CISA Known Exploited Vulnerabilities (KEV) catalog on 2026-11-10.
Associated Government Advisories
Tracked under CISA Known Exploited Vulnerabilities Binding Operational Directive 22-01 for federal civilian agency remediation.