CVE-2026-111793 Openwave Messaging (Ireland) Limited Webtop…
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail…
- CVSS
- 4.3 Medium
- EPSS
- 0.6%
- Percentile
- 51
- Published
- 2026-10-16
- Force
- 7 of 12
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
On CISA’s exploited list
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
- Added
- 2026-11-10
- Federal patch deadline
- 2026-11-24
- Ransomware use
- not known