Skip to content
Urgent CVE-2026-111793: Openwave Messaging Vulnerability Exploited

Urgent CVE-2026-111793: Openwave Messaging Vulnerability Exploited

First seen 10 Nov 2026, 21:50 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 21:51 UTC
  • •CVE-2026-111793 allows bypassing file type restrictions in Openwave Media Transcoder.
  • •Active exploitation has been reported, prompting urgent action from affected organizations.
  • •Organizations should upgrade to the latest version and monitor conversion requests closely.

Openwave Webtop Media Transcoder has a vulnerability (CVE-2026-111793) that allows authenticated users to bypass file type restrictions, potentially enabling them to convert unintended document types. This flaw affects organizations using the transcoder alongside webmail services, particularly those with network-accessible conversion functions. The vulnerability has a CVSS score of 4.3, categorized as medium severity, and was added to the CISA KEV catalog due to reports of active exploitation. The attack vector involves authenticated users submitting file types that should be blocked by administrators. Current evidence does not indicate data theft or broader system compromise, but the risk of disruption to document-conversion services is significant. Organizations are advised to upgrade to the vendor-fixed release and restrict access until patched.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-16
CVE-2026-111793 published
Openwave Messaging disclosed a vulnerability allowing unauthorized file type conversions.
Redpacketsecurity
2026-11-10
CVE added to CISA KEV
CISA confirmed active exploitation of CVE-2026-111793, urging immediate attention from organizations.
Redpacketsecurity

More articles in this cluster (2)

Following this threat?

Track CVE-2026-111793 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (2)

1 / 2

Common questions

What versions of Openwave are affected?
Versions prior to 1.1.22.0 of the Openwave Media Transcoder are affected.
How is this vulnerability being exploited?
Authenticated users can bypass file type restrictions to submit unintended document types for conversion.
What immediate actions should organizations take?
Organizations should upgrade to the vendor-fixed release and restrict network access to the conversion functionality.