CISA Adds Six Known Exploited Vulnerabilities to Catalog
MentionsCiscoGoogleMicrosoftGoogle Chrome
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20320 Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability CVE-2026-111560 Barracuda Networks Multiple Products OS Command Injection Vulnerability CVE-2026-111793 Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer…
Summary from CISA Advisories.
Explained
The technology and terms in this story. Learn more
- ConceptKEV · Known Exploited Vulnerabilities catalogCISA's list of vulnerabilities with evidence of real-world exploitation.
- WeaknessCommand injectionGetting an application to run operating-system commands built from attacker input.
- WeaknessAuthentication bypassA flaw that lets someone in without valid credentials.
- WeaknessMemory corruptionBugs that let a program write where it shouldn't in memory, often leading to code execution.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.
- CWE-288Authentication Bypass Using an Alternate Path or ChannelA second route (a debug port, an API) reaches the protected function without the login check.
- CWE-356Product UI does not Warn User of Unsafe Actions
- CWE-416Use After FreeThe program keeps using memory after releasing it, so an attacker who controls what lands there next can hijack execution.
- CWE-611Improper Restriction of XML External Entity ReferenceAn XML parser follows external entity references, reading local files or reaching internal systems.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.
Related coverage
Other sources covering the same vulnerabilities or event.
SANS Stormcast Wednesday, November 11th, 2026: Microsoft Patch Tuesday Outlook Spoofing (CVE-2026-124194); Apple Bluetooth and iMessage Fixes; SAP NetWeaver CVSS 10s (CVE-2026-89103)
Podcast10 minSANS Internet Storm Center StormCast15h agoVulnerabilitiesIdentityEndpointCVE-2026-113859CVE-2026-119958+2