![\"Gantt](\"https:\/\/cyber.mag212.com\/wp-content\/uploads\/2026\/11\/04-cisa-kev-chrome-cve-2026-125350-cisco-broadworks-openwave-24-november-diagram.jpg\")
Cisco BroadWorks CVE-2026-20320: exploited XXE<\/h2>\n\n\n\n
[Confirmed]<\/strong> An XML external entity flaw that “could allow an unauthenticated, remote attacker to read sensitive configuration information”; due 24 November. (CISA KEV<\/a>) [Unknown]<\/strong> Fixed releases, CVSS and IOCs; read Cisco’s advisory<\/a> (not opened) before acting. [MAG212 analysis]<\/strong> Configuration can hold credentials, so plan rotation alongside the patch.<\/p>\n\n\n\n [Confirmed]<\/strong> “Incorrect resource transfer between spheres” in Openwave Messaging Webtop Media Transcoder; due 24 November, referencing the vendor’s GitHub advisory and JVN. (CISA KEV<\/a>) (Openwave<\/a>) [Unknown]<\/strong> Versions and exploitation details. Narrow audience: telecom and messaging providers.<\/p>\n\n\n\n [MAG212 analysis]<\/strong> Where we recorded the flag, every three-day KEV deadline this week carries forensic triage “Yes” and every 14-day one “No”: the short clock appears to signal suspected compromise, not just urgency.<\/p>\n\n\n\n Chrome is on almost every endpoint, and Chromium-based browsers such as Edge and Opera inherit its bugs until their own vendors ship fixes. BroadWorks runs voice and unified communications for many service providers, and its configuration can hold credentials. Telecom platforms are a favourite target of espionage groups, as today\u2019s CopperDragon story shows.<\/p>\n\n\n\n Force Chrome 157.0.8103.50\/.51 with a browser restart and track Edge and Opera, read Cisco\u2019s BroadWorks advisory and plan credential rotation alongside the patch, and if you run Openwave Webtop, apply the vendor\u2019s fix before the 24 November deadline.<\/p>\n\n\n\n How we label evidence: [Confirmed]<\/strong> comes from a primary source such as a vendor or CISA; [Reported]<\/strong> from a secondary outlet; [Claimed]<\/strong> from an attacker or an unverified party; [MAG212 analysis]<\/strong> is our judgement; [Unknown]<\/strong> means not established at press time. Commands and indicators are copied from the cited sources and were not tested by MAG212 CYBER.<\/em><\/p>\n\n\n\n This story is part of MAG212 CYBER Daily, 11 November 2026<\/a>, with the day\u2019s other verified stories, the Defender\u2019s Action Desk and a full source register. Get the daily briefing free: subscribe to MAG212 CYBER<\/a>. By El Mostafa Ouchen.<\/p>\n\n","protected":false},"excerpt":{"rendered":" CISA\u2019s 10 November KEV batch adds Chrome\u2019s eighth exploited zero-day of 2026 (CVE-2026-125350), a Cisco BroadWorks XXE that can expose configuration, and an Openwave Webtop flaw, all due 24 November. Fixed Chrome builds, what is still unknown and what the short and long KEV clocks signal.<\/p>","protected":false},"author":1,"featured_media":4165,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,15,14],"tags":[62,309,201,310,30],"class_list":["post-4167","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-critical-cves","category-threat-intelligence","category-vulnerabilities","tag-cisa-kev","tag-cisco","tag-google-chrome","tag-telecom","tag-zero-day-vulnerabilities"],"_links":{"self":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/posts\/4167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/comments?post=4167"}],"version-history":[{"count":0,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/posts\/4167\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/media\/4165"}],"wp:attachment":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/media?parent=4167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/categories?post=4167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/tags?post=4167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Openwave Webtop Media Transcoder CVE-2026-111793<\/h2>\n\n\n\n
Why it matters<\/h2>\n\n\n\n
The bottom line<\/h2>\n\n\n\n
\n\n\n\n