Cisco External Entity Injection Vulnerability Allows Attackers to Read Sensitive Data
Thu Aug 20 2026
Networking
Patch Management
Telecom
Vulnerability
cybersecuritynews.com
Cisco has released security updates for a high-severity XML External Entity injection vulnerability in Cisco BroadWorks that could allow unauthenticated remote attackers to read sensitive configuration data and files from affected systems. Tracked as CVE-2026-20320, the issue carries a CVSS score of 7.5 and affects several components of the BroadWorks platform. The vulnerability, identified in […]
The post Cisco External Entity Injection Vulnerability Allows Attackers to Read Sensitive Data appeared first on Cyber Security News.