CVE-2026-111793

Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability

Webtop Media Transcoder

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.

16. Okt 2026

Ausgewertete Quellen

• Hinweis
  https://jvn.jp/en/vu/JVNVU93403064/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111793
• CISA
  Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
• NVD
  CVE-2026-111793
• GitHub
  https://github.com/GISOpenwave/security-advisories-public/blob/main/CAN-2026-2032674.md