CISA adds Openwave Messaging file restriction bypass flaw to KEV catalog after active attacks
What happened.CISA added an actively exploited document handling flaw in Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities catalog.
Why it matters.Enterprise messaging platforms rely on media transcoders to convert attachments into browser-safe formats for webmail users. When direct API submissions bypass administrative file filters, attackers force transcoders to process forbidden formats and expose sensitive message metadata. Messaging engineers must deploy Openwave version 1.1.22.0 immediately and isolate transcoder ports.