CVE-2026-1117934.3Medium
CVE-2026-111793: Openwave Messaging (Ireland) Limited Webtop Media Transcoder vulnerability
Openwave Messaging (Ireland) Limited · Webtop Media Transcoder
Vendor fix available · Affected: Openwave Messaging (Ireland) Limited Webtop Media Transcoder · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.06 (6 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.2%probability of exploitation in the next 30 days
15th percentile
050100
Higher than 15% of scored CVEs
4.3MediumCVSS
LowMediumHighCrit.
DescriptionNVD
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 9 Nov.
- Attackers exploit Openwave Webtop file restriction flawSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.