Do Son Mitel patched a MiCollab command injection flaw rated CVSS 9.8 and an OpenScape UC vulnerability rated CVSS 8.0. No CVE IDs are assigned yet.
Mitel
Mitel patched 12 critical MiCollab vulnerabilities, several at CVSS 10.0. Unauthenticated command injection and SQL injection flaws need urgent updates.
Mitel patches a critical 9.8 CVSS SQL injection in MiCollab. Learn how this unauthenticated flaw chains to full system takeover. Upgrade to v10.2 SP1 now!
Mitel warns of a critical authentication bypass vulnerability in MiVoice MX-ONE's Provisioning Manager, allowing unauthenticated attackers unauthorized access to accounts.
Unauthenticated RCE flaw in Mitel SIP phones (CVSS 9.8) lets attackers gain root via ringtone upload. Exploit PoC shows full system compromise.
A high-severity path traversal flaw (CVE-2025-23092) in Mitel OpenScape Accounting Management allows authenticated admins to upload malicious files for RCE. Update now!
Mitel warns of a critical path traversal flaw (CVSS 9.8) in MiCollab, allowing unauthenticated attackers to access provisioning data and perform admin actions.
A high-severity flaw (CVE-2025-48026) in Mitel OpenScape Xpressions allows unauthenticated attackers to read sensitive local files, including voicemail.
Two flaws in Mitel SIP phones—CVE-2025-47188 and CVE-2025-47187—enable remote command execution and file uploads, putting enterprise networks at risk.
Mitel warns of CVE-2025-23092, a reflected cross-site scripting vulnerability in MiContact Center Business. Learn more.
Mitel's urgent security advisory warns of high-severity vulnerabilities affecting their OpenScape 4000 platforms. Learn about CVE-2025-23093 and CVE-2025-23094.
Mitel's MiCollab platform at risk: Understand the severity of the CVE-2024-41713 vulnerability and the unauthorized access it can enable.
Mitel warns of high-severity SQL injection vulnerability (CVE-2024-47223) in MiCollab software. Find out about the potential impacts it could have on system security and corporate collaboration.
Mitel has issued two critical security advisories warning users of a severe vulnerability in the PHP scripting engine
Critical Security Advisory: Mitel MiCollab Vulnerabilities Exposed (CVE-2024-35285 & CVE-2024-35286)
Critical Security Advisory: Mitel MiCollab Vulnerabilities Exposed (CVE-2024-35285 & CVE-2024-35286)
The vulnerabilities, tracked as CVE-2024-35285 and CVE-2024-35286, have been assigned the highest severity rating of 9.8 on the CVSS
Mitel's Security Bulletin 24-0011-001 details a critical stored XSS vulnerability in the Ignite component of MiContact Center Business
Mitel has issued a critical security patch to address a vulnerability (CVE-2024-28815) in its InAttend and CMG products
the Controller Manager component has fallen prey to another critical vulnerability, CVE-2023-39292, boasting an elevated CVSS score of 8.8
CVE-2023-31457 and CVE-2023-32748 have a Common Vulnerability Scoring System (CVSS) score of 9.6, highlighting the gravity of the situation