CISA added the BroadWorks and Openwave bugs to its KEV catalog on November 10, giving agencies until November 24 to…