{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:30.253Z","products":["openwavemessaging"],"actNowTotal":1,"results":[{"query":"openwavemessaging","matched":1,"actNow":1,"events":[{"id":"kev-2026-11-10-openwave-messaging-l-webtop-media-transcoder","url":"https://securitythreatpulse.com/events/kev-2026-11-10-openwave-messaging-l-webtop-media-transcoder","title":"Openwave Messaging Webtop Media Transcoder: security flaw used in attacks","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 25 days old, so many systems are likely still unpatched.","tier":"now","rankScore":6,"rankWhy":["Exploitation is confirmed by an authoritative source.","The confirmation is 1 day old.","3 products are affected."],"rulesVersion":"v3","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-111793"],"vendor":"Openwave Messaging Limited","product":"Webtop Media Transcoder","affectedProducts":[{"kind":"direct","slug":"openwavemessaging/webtopmediatranscoder","vendor":"Openwave Messaging","product":"Webtop Media Transcoder","evidence":["kev"],"vendorKey":"openwavemessaging","productKey":"webtopmediatranscoder"},{"kind":"direct","slug":"openwavemessagingireland/webtopmediatranscoder","vendor":"Openwave Messaging (ireland)","product":"Webtop Media Transcoder","evidence":["cpe"],"vendorKey":"openwavemessagingireland","productKey":"webtopmediatranscoder"},{"kind":"direct","slug":"openwave/webtopmediatranscoder","vendor":"Openwave","product":"Webtop Media Transcoder","evidence":["cpe"],"vendorKey":"openwave","productKey":"webtopmediatranscoder"}],"category":{"id":"other","label":"Other software","why":"Software we have not put in a category yet. Your IT team or provider will know whether you run it.","doThis":"Find out if you use it. If you do, apply the vendor's fix."},"summary":"Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.","cvss":4.3,"epss":0.00274,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-11-10","kevDueDate":"2026-11-24","firstSeenAt":"2026-11-10T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-11T07:04:53.980Z"}]}]}