Do Son Cisco patches a Crosswork SQL injection flaw, CVE-2026-20030, rated CVSS 10.0. A BroadWorks XXE bug (CVE-2026-20320) also gets a fix.
Cisco BroadWorks
The vulnerability, known as CVE-2023-20238, is an authentication bypass vulnerability, with a maximum CVSS score of 10