GHSA-5353-r4qc-2252MediumCVSS 4.3
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to...
🔗 CVE IDs covered (1)
📋 Description
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2026-111793
- https://github.com/GISOpenwave/security-advisories-public/blob/main/CAN-2026-2032674.md
- https://openwave.ai
- https://jvn.jp/en/vu/JVNVU93403064
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111793
- https://github.com/advisories/GHSA-5353-r4qc-2252