CVE-2026-111793
CVE-2026-111793
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
webtop media transcoder
- Versions
- ≥ 0, < 1.1.22.0: Affected (custom)
Update to 1.1.22.0