Attackers exploit flaws in Cisco BroadWorks and Openwave software

CISA warned Tuesday that attackers are exploiting vulnerabilities affecting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder. The flaws can expose sensitive information, including configuration data, according to SecurityWeek. The Hacker News reports that patches are available and that CISA added both vulnerabilities to its Known Exploited Vulnerabilities catalog.

• SecurityWeek identifies the flaws as CVE-2026-111793 and CVE-2026-20320.

Covered by 3 publishers within 4 hours of the first report.

• SecurityWeek: Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
• Latest 5:12 AM ET BleepingComputer: CISA flags Cisco BroadWorks flaw as actively exploited in attacks

Reporting3

THN The Hacker News Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches · info@thehackernews.com (The Hacker News) 1:04 AM

SW SecurityWeek Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities · Ionut Arghire 4:01 AM

BC BleepingComputer CISA flags Cisco BroadWorks flaw as actively exploited in attacks · Sergiu Gatlan 5:12 AM

Related

RTW Attackers exploit authorization flaw in Drupal Commerce Core October 30

BC Attackers exploit Xen Orchestra flaw to gain administrator access November 10

AT Attackers exploit flaw allowing SSH access to Linux devices November 9

THN Attacker exploits SGLang flaw to access NEAR AI inference server November 10