https://www.phllaps.net/tags/openwave-messaging-limited/ Recent content in Openwave Messaging Limited on PhllapsNET Hugo en-gb Tue, 10 Nov 2026 00:00:00 +0000 https://www.phllaps.net/posts/openwave-messaging-limited-webtop-media-transcoder-incorrect-resource-transfer-between-spheres-vulnerability/ Tue, 10 Nov 2026 00:00:00 +0000 https://www.phllaps.net/posts/openwave-messaging-limited-webtop-media-transcoder-incorrect-resource-transfer-between-spheres-vulnerability/ <div style="background:#d97706;color:white;padding:16px 18px;border-radius:14px;font-weight:800;font-size:18px;display:flex;align-items:center;gap:12px;box-shadow:0 10px 24px rgba(0,0,0,0.18);"><span style="font-size:24px;">🚨</span><span>SEVERITY: MEDIUM — CVSS 4.3</span><span style="opacity:0.95;font-weight:700;margin-left:auto;">Security Advisory</span></div> <h2 id="tldr-">TL;DR 📌</h2> <ul> <li>Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.</li> <li>Highest CVSS: <strong>4.3 (Medium)</strong>.</li> <li><strong>Listed in CISA KEV</strong> (2026-11-10) — this is being exploited in the wild.</li> <li><strong>Check the advisory for fixed releases</strong> — remediation detail is in the vendor link below.</li> <li>CVEs: CVE-2026-111793.</li> </ul> <h2 id="what-it-is">What it is</h2> <p>CVE-2026-111793 affects the Webtop Media Transcoder component within Openwave Messaging Limited&rsquo;s Webtop platform. The transcoder is responsible for converting documents, and administrators can configure which file types it is permitted to process.</p>