CVE-2026-111793

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted.

medium · 4.3

Known exploited

Fix listed

Openwave Webtop Media Transcoder

Published Oct 16, 2026, 18:28 UTC

Description

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.

Reported fixed versions

1.1.22.0

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.