HighVulnerabilityNov 10, 2026

CISA adds Openwave Webtop Media Transcoder flaw

CISA added CVE-2026-111793, an improper resource transfer vulnerability in Openwave Messaging Limited Webtop Media Transcoder, to the KEV catalog. Authenticated users can process and convert unintended document types by bypassing the Webmail interface. Federal patch deadline is November 24, 2026.

Vulnerabilities

CVE-2026-111793 CVSS 4.3 EPSS 0.3% Exploited (CISA KEV)

Sources

CISA KEVRead the original article
SecurityWeekRead the original article

AI-written summary. Check the original reporting before acting.