Skip to content

CVE-2026-20320

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
August 20, 2026
Last Seen
August 20, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Cisco BroadWorks Vulnerability Exposes Sensitive Data to Remote Attackers67.5

Cisco has issued security updates for a high-severity XML External Entity injection vulnerability in Cisco BroadWorks, tracked as CVE-2026-20320. This flaw allows unauthenticated remote attackers to read sensitive configuration data and files from affected systems. The vulnerability, identified in t...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-611 - Improper Restriction Of XML External Entity Reference (xxe)CWE-22 - Path TraversalCWE-287 - Improper AuthenticationBroadWorks