openwave records

1 published records for vendor openwave. 1 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV: 1 · 100%
Weaponized: 1 · 100%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: 25 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-669 Incorrect Resource Transfer Between Spheres1

The weakness classes this vendor ships most often: where to look.

Attack profile

Denial of service 1

All records

1 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
47Plan	CVE-2026-111793Weaponized	Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted.openwave · webtop media transcoder · CWE-669 Denial of service	Medium4.3KEV	0.6%Oct 16, 2026

CVE-2026-111793
47Plan
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted.
MediumCVSS 4.3KEVWeaponizedEPSS 0%
- Denial of service
openwave · webtop media transcoderOct 16, 2026