Summary
Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
- Vendor
- Openwave Messaging Limited
- Product
- Webtop Media Transcoder
- Added to KEV
- Nov 10, 2026
- Remediation due
- Nov 24, 2026 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-669
- EPSS
- 0.6% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References