AI Summary

Threat actors are actively exploiting two vulnerabilities—CVE‑2026‑111793 in Openwave Webtop Media Transcoder and CVE‑2026‑20320 in Cisco BroadWorks—to steal sensitive data such as configuration information. The Openwave flaw stems from unenforced administrator‑defined file‑type restrictions, enabling an authenticated user to process and convert unintended document types outside the webmail interface. Openwave’s advisory notes that the issue affects Webtop Media Transcoder version 1.1.22.0, which was patched in a December 2021 release. The vulnerability was disclosed on October 7, with the CVE record published on October 16. Cisco BroadWorks is also cited as a target, though specific details of its exploit are not provided.

AI summaries can be wrong sometimes—always verify important details using the source article.