CVE-2026-111793
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
| CWE | CWE-669 |
| Vendor | openwave messaging (ireland) limited |
| Product | webtop media transcoder |
| Published | Oct 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for openwave messaging (ireland) limited webtop media transcoder
Be the first to know when new medium vulnerabilities affecting openwave messaging (ireland) limited webtop media transcoder are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
Affected Versions
Openwave Messaging (Ireland) Limited / Webtop Media Transcoder
0 < 1.1.22.0