CVE-2026-111793: Openwave Messaging Limited Webtop Media Transcoder Resource Transfer Flaw

# CVE-2026-111793: Openwave Messaging Limited Webtop Media Transcoder Resource Transfer Flaw

https://gcdradar.vercel.app/incidents/cve-2026-111793-openwave-messaging-limited-webtop-media-tran · AIR-2026-1878 · live

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Exploited in the wild as confirmed by CISA KEV.
- Fix status: Partly patched
- First reported: 2026-11-10
- AI role: No AI role
- Products: Openwave Messaging Limited Webtop Media Transcoder
- CVE ids: CVE-2026-111793
- CVSS: 4.3

## Summary

An incorrect resource transfer between spheres vulnerability in Openwave Messaging Limited Webtop Media Transcoder allows authenticated users to process unintended document types. CISA confirmed exploitation in the wild and added the flaw to its KEV catalog.

## What to do

Apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.

## Latest updates

- 2026-11-10: CVE-2026-111793: Openwave Messaging Limited Webtop Media Transcoder — Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability (https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111793)

## Sources

- 2026-11-10 CISA: CVE-2026-111793: Openwave Messaging Limited Webtop Media Transcoder — Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111793

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.