Cisco Broadworks
Monthly
Unauthenticated remote file disclosure in Cisco BroadWorks stems from the OCI XML Parser permitting external entity resolution by default, allowing an attacker to read arbitrary filesystem files with the privileges of the BroadWorks process account. The affected component is the Open Client Interface - Provisioning (OCI-P) service, reachable over the network with no authentication or user interaction required, yielding a CVSS 7.5 score with C:H. No public exploit has been identified at time of analysis, and this vulnerability has not been confirmed as actively exploited by CISA KEV.
Missing per-role authorization checks in the CommPilot web-based management interface of Cisco BroadWorks allow an authenticated, low-privilege remote user to alter configurations on select administrative pages via a crafted HTTP request. The issue (CVE-2026-76438, CWE-863, CVSS 6.5 / CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) affects BroadWorks releases 21.0 through 26.0, including the 21.sp1 line and assorted RI builds, with the assessed impact limited to configuration integrity - no confidentiality or availability loss per the vector. There is no CISA KEV listing and no public exploit identified at time of analysis, so this is a routine, patch-priority access-control defect rather than an emergency: a valid low-privilege CommPilot account is a prerequisite, and BroadWorks management interfaces are normally confined to carrier or management networks.
Unauthenticated remote file disclosure in Cisco BroadWorks stems from the OCI XML Parser permitting external entity resolution by default, allowing an attacker to read arbitrary filesystem files with the privileges of the BroadWorks process account. The affected component is the Open Client Interface - Provisioning (OCI-P) service, reachable over the network with no authentication or user interaction required, yielding a CVSS 7.5 score with C:H. No public exploit has been identified at time of analysis, and this vulnerability has not been confirmed as actively exploited by CISA KEV.
Missing per-role authorization checks in the CommPilot web-based management interface of Cisco BroadWorks allow an authenticated, low-privilege remote user to alter configurations on select administrative pages via a crafted HTTP request. The issue (CVE-2026-76438, CWE-863, CVSS 6.5 / CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) affects BroadWorks releases 21.0 through 26.0, including the 21.sp1 line and assorted RI builds, with the assessed impact limited to configuration integrity - no confidentiality or availability loss per the vector. There is no CISA KEV listing and no public exploit identified at time of analysis, so this is a routine, patch-priority access-control defect rather than an emergency: a valid low-privilege CommPilot account is a prerequisite, and BroadWorks management interfaces are normally confined to carrier or management networks.