[ CVE-2026-111793 · Published 16 Oct 2026 ]
Vulnerability in Openwave Messaging (Ireland) Limited Webtop Media Transcoder
CVSS 4.3
EPSS <1%No fix listed yet
[ Description ]Official description
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.