Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-20320

CVSS 7.5 · High EPSS 0.35% · P29

Affected Version Matrix 1

VendorProductVersion RangeStatus
CiscoCisco BroadWorksN/Aaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-20320

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a crafted XML message to the Open Client Interface – Provisioning (OCI-P) service. A successful exploit could allow the attacker to view sensitive files from the filesystem with the privileges of the Cisco BroadWorks user.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Source: CVE Program / CVE List V5

Affected Products

VendorProductAffected VersionsCPESubscribe
CiscoCisco BroadWorks N/A -

II. Public POCs for CVE-2026-20320

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-20320

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-20320 (1)

Same Patch Batch · Cisco · 2026-08-19 · 15 CVEs total

CVE-2026-2031510.0 CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Co
CVE-2026-2031710.0 CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentic
CVE-2026-2035810.0 CRITICALCisco Crosswork Security Hardening Release: August 2026
CVE-2026-2035710.0 CRITICALCisco Crosswork Security Hardening Release: August 2026
CVE-2026-2003010.0 CRITICALCisco Crosswork Security Hardening Release: August 2026
CVE-2026-203599.9 CRITICALCisco Crosswork Security Hardening Release: August 2026
CVE-2026-202319.9 CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutraliz
CVE-2026-203189.6 CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Val
CVE-2026-203197.5 HIGHCisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management
CVE-2026-203276.5 MEDIUMCisco Unified Intelligence Center SQL Injection Vulnerability
CVE-2026-203026.1 MEDIUMCisco RoomOS Stack Overflow Vulnerability
CVE-2026-202325.4 MEDIUMCisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
CVE-2026-201775.3 MEDIUMCisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
CVE-2026-203145.0 MEDIUMCisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-

IV. Related Vulnerabilities

Same product: Cisco BroadWorks
Same vendor: Cisco
Same weakness: CWE-611

V. Comments for CVE-2026-20320

No comments yet

Leave a comment