Description
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
Published: 2026-10-16
Score: 4.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 16 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Title Unrestricted Media Conversion via Bypassed File Type Restrictions in Openwave Webtop

Fri, 16 Oct 2026 18:45:00 +0000

Type Values Removed Values Added
Description Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
Weaknesses CWE-669
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-16T18:28:10.170Z

Reserved: 2026-10-16T18:28:09.751Z

Link: CVE-2026-111793

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-16T19:17:05.680

Modified: 2026-10-16T19:56:15.773

Link: CVE-2026-111793

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-16T20:30:06Z

Weaknesses
  • CWE-669

    Incorrect Resource Transfer Between Spheres