Incorrect Resource Transfer Between Spheres Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 10 Nov 2026.
0.64%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-111793. Nothing runs until you send it.
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
You are affected if
The fix