CVE-2026-20320: Cisco BroadWorks Improper Restriction of XML External
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability. Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system.
- CISA KEV-listed (remediation due 2026-11-24)
- EPSS 0.8% (57.7% percentile)
- CVSS 7.5 high