Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

CISA has added two security flaws affecting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation despite patches being available. The flaws include CVE-2026-20320, an improper restriction of XML external entity references in Cisco BroadWorks.