# Openwave Messaging (Ireland) Ltd - Public Security Advisory

## Identifier

CAN-2026-2032674

## Summary
Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. 
This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.

## Affected Products
Webtop MediaTranscoder

## Severity

CVSS v3.1: 4.3 Medium

## Affected Versions

Versions prior to 1.1.22.0

## Fixed Versions

From Version 1.1.22.0 , released on 6 December 2021 

## Remediation

Customers should upgrade to the latest Media Server 2.0 supported release 

## References

CAN-2026-2032674

## Disclosure Date

2026-10-07