Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
| CVE | CVE-2026-111793 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 4.3 / 10 |
| EPSS | 0.3% en 30 días (percentil 20) |
| CWE | CWE-669 |
| CISA KEV | Explotación activa confirmada |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
openwave/webtop_media_transcoder