Attackers are actively exploiting two vulnerabilities in Openwave Webtop Media Transcoder and Cisco BroadWorks to access sensitive information. The Openwave flaw, CVE-2026-111793, allows authenticated users to bypass file-type restrictions and upload crafted files to leak data. The Cisco issue, CVE-2026-20320, is an XML external entity injection that enables remote attackers to read configuration details without authentication. Malbear Labs reported that a Chinese-speaking threat actor used an autonomous AI intrusion harness to target a European telecommunications provider and at least 13 organizations using its services. CISA added both defects to its Known Exploited Vulnerabilities catalog on November 10, urging federal agencies to apply patches by November 24.
Read the full story at securityweek.com.
Photo: u_bc2fqtvsus / Pixabay