Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches
CISA added two vulnerabilities in Cisco BroadWorks and Openwave Messaging to its catalog of actively exploited flaws, urging immediate patching.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities affecting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities catalog.
CISA's inclusion of these vulnerabilities in its catalog highlights the serious nature of the threats they pose. While specific details on the methods of exploitation remain undisclosed, the agency's move signals that attackers are actively leveraging these flaws in real-world scenarios. Cisco has not attributed the exploitation to any specific threat actor, leaving the identity of the perpetrators unknown.
Cisco previously disclosed vulnerabilities in other products, such as Catalyst SD-WAN and Secure Firewall Software, which were also subject to active exploitation. The agency has recommended that Federal Civilian Executive Branch agencies apply the necessary patches by November 24, 2026, to protect their systems against these vulnerabilities.
What security teams should do
Apply the available patches for Cisco BroadWorks and Openwave Messaging vulnerabilities.
What remains unknown
Details on how the vulnerabilities are being exploited are not available.
The identity of the threat actors exploiting these vulnerabilities is unknown.
Cisco's advisory does not mention the vulnerabilities being maliciously used.