CISA confirms exploitation of Openwave Webtop flaw
CVE-2026-111793 allows an authenticated user to process and convert unintended document types by bypassing the webmail interface. CISA added the flaw to KEV and directs organizations to apply vendor mitigations.
In this article
For the technical team
- CVE
- CVE-2026-111793
- Affected
- Openwave Messaging Limited Webtop Media Transcoder
- Exploitation
- Exploitation confirmed
- Fix
- Fix unconfirmed
Timeline
CISA confirmed exploitation and set a November 24, 2026 federal deadline.



