File Type Restriction Bypass in Openwave Webtop Media Transcoder
CVE-2026-111793

4.3MEDIUM

Key Information:

Vendor: Openwave Messaging (ireland) Limited
Status: Webtop Media Transcoder
Vendor: CVE Published:; 16 October 2026

🔔 Create Openwave Messaging (ireland) Limited Vulnerability Alert

What is CVE-2026-111793?

The Openwave Webtop Media Transcoder has a vulnerability where it fails to enforce file type restrictions defined by administrators. This allows authenticated users to process and convert unintended file types, potentially leading to security issues and unauthorized data exposure when bypassing the configured Webmail experience.

Affected Version(s)

Webtop Media Transcoder Linux 0 < 1.1.22.0

References

https://openwave.ai

https://github.com/GISOpenwave/security-advisories-public...

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 16, 2026
Vulnerability Reserved
Oct 16, 2026

CVE-2026-111793 Data

JSON