CVE-2026-111793: Medium severity Openwave Webtop Media Transcoder vulnerability
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated and able to bypass the Webmail experience to submit conversion requests. The issue is remotely reachable and requires no user interaction.
What is the impact of successful exploitation?
A successful attacker may process and convert document types that administrators intended to prohibit. The provided severity vector indicates availability impact only, with no stated confidentiality or integrity impact.
Are administrator-defined file type restrictions sufficient protection?
No. The issue is that the transcoder does not enforce those restrictions when an authenticated user bypasses the Webmail experience.