CVE-2026-20320: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
Elevated⚠ Actively exploited (CISA KEV)
Elevated
Severity
Active
CISA KEV
No
Ransomware use
Nov 24, 2026
Patch deadline
⚠ Exploited in the wild. CISA added CVE-2026-20320 to its Known Exploited Vulnerabilities catalog on Nov 10, 2026, with a federal patch deadline of Nov 24, 2026 — meaning attackers are actively using it. If you run the affected software, patch it immediately.
Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an…
Details
AffectedCisco · BroadWorks
WeaknessCWE-611
Added to CISA KEVNov 10, 2026
Federal patch deadlineNov 24, 2026
Known ransomware useNot documented
Frequently asked questions
Is CVE-2026-20320 being actively exploited?
Yes — CISA lists CVE-2026-20320 in its Known Exploited Vulnerabilities (KEV) catalog, so it is confirmed exploited in the wild. Patch it as a priority.
What does CVE-2026-20320 affect?
CVE-2026-20320 affects Cisco · BroadWorks.
How do I fix CVE-2026-20320?
Apply the vendor’s patch for the affected software. The federal patch deadline was Nov 24, 2026. Then check whether your personal data was exposed in any related breach.