CVE-2026-111793: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
Elevated⚠ Actively exploited (CISA KEV)
Elevated
Severity
Active
CISA KEV
No
Ransomware use
Nov 24, 2026
Patch deadline
⚠ Exploited in the wild. CISA added CVE-2026-111793 to its Known Exploited Vulnerabilities catalog on Nov 10, 2026, with a federal patch deadline of Nov 24, 2026 — meaning attackers are actively using it. If you run the affected software, patch it immediately.
Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document…
Details
AffectedOpenwave Messaging Limited · Webtop Media Transcoder
WeaknessCWE-669
Added to CISA KEVNov 10, 2026
Federal patch deadlineNov 24, 2026
Known ransomware useNot documented
Frequently asked questions
Is CVE-2026-111793 being actively exploited?
Yes — CISA lists CVE-2026-111793 in its Known Exploited Vulnerabilities (KEV) catalog, so it is confirmed exploited in the wild. Patch it as a priority.
What does CVE-2026-111793 affect?
CVE-2026-111793 affects Openwave Messaging Limited · Webtop Media Transcoder.
How do I fix CVE-2026-111793?
Apply the vendor’s patch for the affected software. The federal patch deadline was Nov 24, 2026. Then check whether your personal data was exposed in any related breach.