Updated daily · official sources

Security Radar

Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).

38exploited in the last 30 days
15critical (CVSS ≥ 9)
0used in ransomware
1779in the KEV catalog
1 result(s)
CVE-2026-20320 High · CVSS 7.5 added on 11/10/2026

Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability

Cisco · BroadWorks · CWE-611

Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system.

EPSS 0,8% CISA deadline: 11/24/2026 NVD ↗

Want to know if your environment is exposed?

We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.

Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.

This product uses the NVD API but is not endorsed or certified by the NVD.