Security
1 min read0 views
CVE-2026-20320: A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read… (Update: added to CISA KEV)
Update: added to CISA KEV. A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a…
Reading Level🟢Beginner
Listen to this article
Update: added to CISA KEV. A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a crafted XML me...
Original Source
cve.now CISA KEVLike this article
Share this article
Share:
Related Articles
CVE-2026-125350: Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (Update: added to CISA KEV)
1 min read·1h ago
CVE-2026-111560: OS Command Injection in Barracuda Appliances (Update: added to CISA KEV)
1 min read·1h ago
CVE-2026-116606: Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway (Update: added to CISA KEV)
1 min read·1h ago