Event Monitor Cyber
EM-20261110-1E0F VulnerabilityHigh severity

Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability

CVE-2026-20320 · Cisco BroadWorks

Share

0 hours from first report to confirmed exploitation.

Status
Confirmed

Since : CISA added it to Known Exploited Vulnerabilities.

First Signal
Nov 10 12:00 UTCC1 CISA Known Exploited Vulnerabilities
Page Born
Nov 10 12:00 UTCsecond source joined
Last Signal
Nov 10 12:00 UTC14 hours before snapshot
Sources
22 official · 0 research, news or crowd
Open For
8 hoursso far

Life Of This Page

  1. 1
    Born
    A second, independent source names it.
  2. 2
    Developing
    New signals join; severity can move.
  3. 3
    Confirmed · Now
    CISA KEV lists it, or exploitation in the wild is reported.
  4. 4
    Resolved
    Not yet
    Past the fix deadline and 14 days with no new signal.
  5. 5
    Archived
    Not yet
    30 days after resolved. Read only; the link keeps working. Reopens if it comes back.

The ID never changes, and earlier addresses keep working. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.

Vulnerability Lifecycle

  1. Disclosed: reached
    Aug 19 17:18 UTC
    C6 NVD published
  2. Scored: reached
    Aug 19 17:18 UTC
    CVSS 7.5 · EPSS 0.4%
  3. Exploited: reached
    Nov 10 12:00 UTC
    C1 CISA KEV, fix by Nov 24
  4. Advisories: reached
    Nov 10 12:00 UTC
    1 government and CERT sources
  5. Vendor Response: not yet
    Not yet
    None in sources yet
  6. Resolved: not yet
    Not yet
    When fixed: KEV deadline Nov 24, then 14 quiet days

Timeline

06:0008:0010:0012:0014:0016:0018:0020:00BornC1 CISA Known Exploited VulnerabilitC2 CISA Cybersecurity Advisories

Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.

Signals

  1. CISA Adds Six Known Exploited Vulnerabilities to Catalog (opens source in a new tab) CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20320 Cisco BroadWorks Improper Restriction of XML External Entity… High severityGovernmentC2 CISA Cybersecurity Advisories
  2. CVE-2026-20320 added to KEV: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability (opens source in a new tab) Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. High severityExploited ListC1 CISA Known Exploited Vulnerabilities