Mitel

Vulnerability activity for Mitel: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 8
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 10
Critical (CVSS 9+): 1
Exploited (CISA KEV): 0
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

6.8MediumAug 12, 2024Mitel SIP Phones Code / command injectionCVE-2024-41710Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.Added to KEV Feb 12, 2025 · 184 days after publicationExploited42% likelyDetection
9.1CriticalOct 21, 2024Mitel MiCollab Path traversal / file handlingCVE-2024-41713Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.Added to KEV Jan 7, 2025 · 78 days after publicationExploited97% likelyExploit codeNucleiDetection
4.4MediumDec 10, 2024Mitel MiCollab Path traversal / file handlingCVE-2024-55550Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.Added to KEV Jan 7, 2025 · 28 days after publicationExploited38% likelyExploit codeNucleiDetection
6.8MediumNov 22, 2022Mitel MiVoice Connect Code / command injectionCVE-2022-40765The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.Added to KEV Feb 21, 2023 · 91 days after publicationExploited11% likely
6.8MediumNov 22, 2022Mitel MiVoice Connect Code / command injectionCVE-2022-41223The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.Added to KEV Feb 21, 2023 · 91 days after publicationExploited11% likely
9.8CriticalApr 26, 2022Mitel MiVoice ConnectCVE-2022-29499The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.Added to KEV Jun 27, 2022 · 62 days after publicationExploited55% likelyDetection
9.8CriticalMar 9, 2022Mitel MiCollab, MiVoice Business Express Auth bypass / access controlCVE-2022-26143A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.Added to KEV Mar 25, 2022 · 15 days after publicationExploited87% likelyExploit codeNucleiDetection

Recent

8.4HighOct 5, 2026Mitel MiVoice Office 400CVE-2026-104811DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality of the web portal listening on TCP port 443. The application is intended to allow users to upload WAV audio files but fails to properly validate the uploaded file type. An attacker can exploit this
8.4HighOct 5, 2026Mitel MiVoice Office 400CVE-2026-104810This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management → File Browser, which is affected by a directory traversal vulnerability. By exploiting this vulnerability, an authenticated attacker can access and delete files outside of the intended directory, inclu
8.4HighOct 5, 2026Mitel MiVoice Office 400 Path traversal / file handlingCVE-2026-104809DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A malicious shared object using the expected name can therefore be loaded by a privileged process. The module code then executes within the context and privileges of that process. This results in arbitrary cod
1.9LowOct 5, 2026Mitel MiVoice Office 400 XSSCVE-2026-104808DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Users → Users List. The vulnerability occurs in the “Microsoft Exchange mailbox” field, which fails to properly validate or sanitize user-supplied input befo
1.9LowOct 5, 2026Mitel MiVoice Office 400 XSSCVE-2026-104807DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application. The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Domains, specifically in the “Description” field. The application fails to properly validate or sanitize user-supplied input before storing and subsequently rendering the field. By injecting maliciou
5.5MediumOct 5, 2026Mitel MiVoice Office 400 Path traversal / file handlingCVE-2026-104806DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to properly validate user-supplied file paths, allowing an attacker to manipulate the requested path and traverse the underlying directory structure. By exploiting this vulnerability, an attacker can acc
8.5HighOct 5, 2026Mitel MiVoice Office 400 Path traversal / file handlingCVE-2026-104805DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fails to properly validate the paths, file types, integrity, and authenticity of files contained within a restored TGZ archive. The application does not perform file-signature verification before extrac
8.4HighOct 5, 2026Mitel MiVoice Office 400 Path traversal / file handlingCVE-2026-104706DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> View Logs
8.2HighJan 15, 2026Mitel cx XSSCVE-2025-67823A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.
9.4CriticalJan 15, 2026Mitel mivoice mx-one Auth bypass / access controlCVE-2025-67822A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.
6.8MediumAug 12, 2024Mitel SIP Phones Code / command injectionCVE-2024-41710Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.Exploited42% likelyDetection
4.4MediumDec 10, 2024Mitel MiCollab Path traversal / file handlingCVE-2024-55550Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.Exploited38% likelyExploit codeNucleiDetection
9.1CriticalOct 21, 2024Mitel MiCollab Path traversal / file handlingCVE-2024-41713Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.Exploited97% likelyExploit codeNucleiDetection
9.8CriticalOct 21, 2024Mitel micollab SQL injectionCVE-2024-35286A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary database and management operations.66% likelyExploit codeNucleiDetection
6.8MediumNov 22, 2022Mitel MiVoice Connect Code / command injectionCVE-2022-41223The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.Exploited11% likely
6.8MediumNov 22, 2022Mitel MiVoice Connect Code / command injectionCVE-2022-40765The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.Exploited11% likely
9.8CriticalApr 26, 2022Mitel MiVoice ConnectCVE-2022-29499The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.Exploited55% likelyDetection
9.8CriticalMar 9, 2022Mitel MiCollab, MiVoice Business Express Auth bypass / access controlCVE-2022-26143A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.Exploited87% likelyExploit codeNucleiDetection

See every Mitel entry on the dashboard.