Type Vulnerability
Openwave Messaging Limited Webtop Media Transcoder has a vulnerability that may allow an authenticated user to process unintended document types when bypassing the Webmail experience.
Openwave Messaging Limited
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
CVE-2026-111793
What this means
This is rated medium severity (4.3 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Openwave Messaging Limited Webtop Media Transcoder is in your estate.
Full vendor description
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
Scoring and exploitation
4.3/ 10
CVSS 3.1 base scoreMedium
Exploitable over the network with a low-privilege account, and no one has to click or open anything. Low impact on availability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredLowPR:L
User interactionNoneUI:N
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityNoneC:N
IntegrityNoneI:N
AvailabilityLowA:L
- ~0.3% estimated chance of attack in 30 daysModel estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Yes — confirmed exploitation (US CISA )
- Not reported
- Listed product
- Openwave Messaging Limited Webtop Media Transcoder
Weaknesses
CWE-669
References
4 links from the CVE record, grouped by site.
github.com1 link
openwave.ai1 link
jvn.jp1 link
cisa.gov1 link