Security vulnerabilities impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder have been added to the Known Exploited Vulnerabilities catalog. Federal Civilian Executive Branch agencies are directed to apply necessary patches by November 24, 2026. The inclusion follows evidence of active exploitation involving these software flaws in real-world attacks.
The catalog additions highlight ongoing efforts by security authorities to track and mitigate software defects that are actively targeted by malicious actors. Although patches have been made available for the affected systems, the persistence of active exploitation underscores the critical need for rapid deployment of vendor updates across enterprise networks.
In addition to the BroadWorks and Openwave flaws, recent security disclosures have highlighted other significant vulnerabilities within networking infrastructure products. These include Cisco Catalyst SD-WAN, tracked as CVE-2026-20127 and carrying a maximum CVSS score of 10.0, alongside issues affecting Secure Firewall ASA and FTD software tracked as CVE-2026-76418 with a CVSS score of 8.6.
Cisco disclosed active exploitation of both the Catalyst SD-WAN and Secure Firewall vulnerabilities late last month. However, the company’s initial security advisories did not mention malicious usage of the BroadWorks and Openwave flaws, demonstrating how ongoing threat intelligence and catalogue monitoring continue to uncover active exploitation details.
Specific technical details regarding how the BroadWorks and Openwave vulnerabilities are being exploited in the wild remain unavailable, and formal attribution to specific threat actors has not been established. Nevertheless, the confirmation of active exploitation poses substantial risks to organizations utilizing these platforms if updates are delayed.
Federal Civilian Executive Branch agencies are instructed to adhere strictly to the remediation timeline and apply available patches by November 24, 2026. Organizations outside government sectors are also strongly encouraged to review the catalog updates and apply relevant software patches immediately to safeguard their networks against ongoing threats.
Stay alert, and keep your security measures updated!
Source: Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news
