CISA adds Cisco BroadWorks XML external entity flaw to KEV catalog amid active attacks
What happened.CISA added an out-of-band blind XML external entity injection vulnerability in Cisco BroadWorks to its Known Exploited Vulnerabilities catalog.
Why it matters.Cisco BroadWorks provides session control backbones for telecommunications carriers and large enterprise phone networks. When unauthenticated XML payloads force servers to leak configuration files, threat actors intercept carrier communications. Telecommunications engineers must apply Cisco BroadWorks maintenance patches immediately and restrict management port access.