Cisco BroadWorks Vulnerability Allows Remote Attackers to Access Sensitive Files

Gbhackers •Divya • August 20, 2026

Cisco has issued security updates for a high-severity vulnerability in Cisco BroadWorks that could allow unauthenticated remote attackers to access sensitive configuration files on affected systems. This vulnerability is tracked as CVE-2026-20320 and is characterized as an out-of-band blind XML External Entity (XXE) injection vulnerability in the Open Client Interface (OCI) XML Parser. Cisco assigned […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco BroadWorks Vulnerability Exposes Sensitive Data to Remote Attackers Cisco has issued security updates for a high-severity XML External Entity injection vulnerability in Cisco BroadWorks, tracked as CVE-2026-20320. This flaw allows unauthenticated remote attackers to read sensitive configuration data and files from affected systems. The vulnerability, identified in the Open Client Interface XML Parser, has a CVSS score of 7.5 and could lead to various attacks, including remote code execution and authentication bypasses. Cisco has confirmed that several components of the BroadWorks platform are affected. Security updates have been released to mitigate the risks associated with this vulnerability. Organizations using Cisco BroadWorks are advised to apply these updates promptly to protect against potential exploitation. 4 sources 68

Extracted Entities

Cisco BroadWorks Vulnerability Allows Remote Attackers to Access Sensitive Files

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)