Live › vulnerability › CVE-2026-111793
Go to dashboardOpenwave Webtop Media Transcoder does not enforce the file-type restrictions an administrator sets for conversion. An authenticated user who bypasses the Webmail interface can convert document types the administrator meant to block.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organisations running Openwave Webtop Media Transcoder with administrator-defined file type restrictions. The sources do not name affected versions or say whether direct access to the transcoder is exposed beyond the Webmail front end.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
This page as .md · .json · in your agent: get_signal("CVE-2026-111793")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.