Mitel vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Exploited Mitel flaws

These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.

• CVE-2024-41710 Mitel SIP Phones Argument InjectionExploited since Feb 12, 2025 · CVSS 7.2
• CVE-2024-55550 Mitel MiCollab Path TraversalExploited since Jan 7, 2025 · ransomware · CVSS 2.7
• CVE-2024-41713 Mitel MiCollab Path TraversalExploited since Jan 7, 2025 · ransomware · CVSS 9.1
• CVE-2022-41223 Mitel MiVoice Connect Code InjectionExploited since Feb 21, 2023 · ransomware · CVSS 6.8
• CVE-2022-40765 Mitel MiVoice Connect Command InjectionExploited since Feb 21, 2023 · ransomware · CVSS 6.8
• CVE-2022-29499 Mitel MiVoice Connect Data ValidationExploited since Jun 27, 2022 · ransomware · CVSS 9.8
• CVE-2022-26143 MiCollab, MiVoice Business Express Access ControlExploited since Mar 25, 2022 · CVSS 9.8

Latest high and critical flaws

• CVE-2026-104811 DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product.High 8.4 · Oct 5, 2026
• CVE-2026-104810 This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400.High 8.4 · Oct 5, 2026
• CVE-2026-104809 DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimHigh 8.4 · Oct 5, 2026
• CVE-2026-104805 DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to High 8.5 · Oct 5, 2026
• CVE-2026-104706 DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus AHigh 8.4 · Oct 5, 2026
• CVE-2025-67823 A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticatHigh 8.2 · Jan 15, 2026
• CVE-2025-67822 A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacCritical 9.4 · Jan 15, 2026
• CVE-2025-52914 A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated attacker to conducHigh 8.8 · Aug 8, 2025
• CVE-2024-41714 A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0High 8.8 · Oct 21, 2024
• CVE-2024-41713 Mitel MiCollab Path TraversalExploited · Critical 9.1 · Oct 21, 2024
• CVE-2024-35314 A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an unCritical 9.8 · Oct 21, 2024
• CVE-2024-35286 A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insuffCritical 9.8 · Oct 21, 2024
• CVE-2024-35285 A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a command injection attack due to inCritical 9.8 · Oct 21, 2024
• CVE-2024-30158 A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to coHigh 7.2 · Oct 21, 2024
• CVE-2024-30157 A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative priviHigh 7.2 · Oct 21, 2024
• CVE-2024-47912 A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacHigh 8.2 · Oct 21, 2024
• CVE-2024-47223 A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attackCritical 9.4 · Oct 21, 2024
• CVE-2024-47189 The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attaHigh 7.7 · Oct 21, 2024
• CVE-2024-42514 A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthoriHigh 8.1 · Oct 1, 2024
• CVE-2024-36446 The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass attack due High 8.8 · Aug 13, 2024
• CVE-2024-41710 Mitel SIP Phones Argument InjectionExploited · High 7.2 · Aug 12, 2024
• CVE-2024-37570 On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path parameters (sent by an auHigh 8.8 · Jun 9, 2024
• CVE-2024-37569 An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices.High 8.8 · Jun 9, 2024
• CVE-2024-31967 A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.Critical 9.1 · May 2, 2024
• CVE-2024-31964 A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.High 7.5 · May 2, 2024