# CISA Orders Agencies to Patch Telecom Flaws

On November 10, 2026, CISA added actively exploited Cisco BroadWorks vulnerability CVE-2026-20320 and Openwave Webtop Media Transcoder vulnerability CVE-2026-111793 to its Known Exploited Vulnerabilities catalog and directed federal agencies to remediate them by November 24. Federal civilian executive agencies must upgrade affected BroadWorks systems to RI.2026.07 or later, or disconnect them from the federal network, and certify completion by 23:59 UTC on November 24. The Cisco flaw can be exploited remotely without authentication; the Openwave flaw requires an authenticated user. With 12 days remaining as of November 12, this creates an immediate remediation workload, though the signals identify no specific solicitation or contract award.

- Contractors supporting federal networks can help agencies identify affected deployments, apply fixes or isolate systems, verify remediation, and review potential incidents. The Cisco vulnerability has been patchable since August 19.
- **Key deadline:** Federal civilian executive agencies must complete remediation and submit Cisco remediation certifications by November 24, 2026, at 23:59 UTC.
- Companies providing asset discovery, vulnerability prioritization, patch deployment, or monitoring services may find near-term demand, but should distinguish this operational need from a confirmed procurement opportunity.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** November 12, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Federal Civilian Executive Branch Agencies

### Vendors
- Cisco (BroadWorks software manufacturer)
- Openwave Messaging ()

### Sources
- [CISA Adds Actively Exploited Cisco BroadWorks Flaw to KEV Must-Patch List – Homeland411](https://homeland411.com/cisa-adds-exploited-cisco-broadworks-flaw-kev-catalog) - Homeland411
- [Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities - SecurityWeek](https://www.securityweek.com/threat-actors-exploit-openwave-cisco-broadworks-vulnerabilities) - SecurityWeek
- [CISA Orders Patch for Cisco Flaw Tied to AI Agent Attack](https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364) - BankInfoSecurity