cyber.hendryadrian.com
Vulnerability & Exploit · thehackernews.com

CISA Adds Actively Exploited BroadWorks and Openwave Flaws to KEV

· Original article ↗

Summary

CISA added flaws affecting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its KEV catalog, citing active-exploitation evidence. Exploitation details and actor attribution are unavailable; FCEB agencies should patch by Nov. 24, 2026.

Key points

  • CISA added two flaws affecting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.
  • The article provides no details on real-world exploitation or a named threat actor; Cisco's advisory does not mention malicious use of the flaw.
  • Federal Civilian Executive Branch agencies are advised to apply patches by November 24, 2026.
  • Separately, Cisco disclosed active exploitation of CVE-2026-20127 in Catalyst SD-WAN and CVE-2026-76418 in Secure Firewall ASA and FTD software.

Article Details

Exploitation Status
active
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-20127Cisco · Cisco Catalyst SD-WAN ManagerLate last month, Cisco revealed that two different vulnerabilities in Catalyst SD-WAN (CVE-2026-20127, CVSS score: 10.0) Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat DefenseCVE-2026-76418Vendor / Product unavailableAdaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software (CVE-2026-76418, CVSS score: 8.6) have been actively exploited in the wild.

Vendors

CiscoU.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV)OpenwaveInfrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence

Products

BroadWorksand Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog,Openwave Messaging Webtop Media TranscoderSecurity Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active

Countries

United StatesThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV)

Related Articles