Cisco BroadWorks flaw enters CISA’s actively exploited catalog
The US Cybersecurity and Infrastructure Security Agency has marked a high-severity Cisco BroadWorks vulnerability as actively exploited in attacks. Cisco BroadWorks is a cloud unified communications platform used by telecom carriers and managed service providers to offer branded cloud PBX, voice, and collaboration services to business customers. CISA’s new warning centers on CVE-2026-20320, which stems from improper restriction of an XML External Entity reference weakness in the Open Client Interface…