Mitel Mivoice vulnerabilities

• mitel mivoice office 400 Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution CVE-2026-104811 8.4 HighOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability CVE-2026-104810 8.4 HighOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution CVE-2026-104809 8.4 HighOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 stored Cross-Site Scripting CVE-2026-104808 1.9 LowOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 stored Cross-Site Scripting CVE-2026-104807 1.9 LowOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure CVE-2026-104806 5.5 MediumOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution CVE-2026-104805 8.5 HighOctober 5, 2026
• mitel mivoice office 400 Mitel MiVoice Office 400 view system files path traversal CVE-2026-104706 8.4 HighOctober 5, 2026
• mitel mivoice mx-one A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50)... CVE-2025-67822 9.4 CriticalJanuary 15, 2026
• mitel micollab, mivoice business solution virtual instance, mivoice business solutions virtual instance +2 more A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and... CVE-2024-41714 8.8 HighOctober 21, 2024
• mitel micollab, mivoice business, mivoice business solution virtual instance +2 more A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business... CVE-2024-35315 Public exploit 5.6 MediumOctober 21, 2024
• mitel micollab, mivoice business solution virtual instance, mivoice business solutions virtual instance +2 more A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business... CVE-2024-35314 9.8 CriticalOctober 21, 2024
• mitel mivoice mx-one The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an... CVE-2024-36446 8.8 HighAugust 13, 2024
• mitel mivoice connect A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24... CVE-2023-39285 4.3 MediumSeptember 14, 2023
• mitel mivoice connect A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102... CVE-2023-39291 4.9 MediumAugust 25, 2023
• mitel mivoice connect A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24... CVE-2023-39290 4.9 MediumAugust 25, 2023
• mitel mivoice connect A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6... CVE-2023-39289 7.5 HighAugust 25, 2023
• mitel mivoice connect A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6... CVE-2023-39288 5.5 MediumAugust 25, 2023
• mitel mivoice connect A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24... CVE-2023-39287 5.5 MediumAugust 25, 2023
• mitel mivoice office 400, mivoice office 400 smb controller firmware +1 more A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller... CVE-2023-39293 9.8 CriticalAugust 14, 2023
• mitel mivoice office 400, mivoice office 400 smb controller firmware +1 more A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller... CVE-2023-39292 9.8 CriticalAugust 14, 2023
• mitel mivoice connect The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could... CVE-2023-32748 9.8 CriticalAugust 14, 2023
• mitel mivoice connect A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101... CVE-2023-31460 7.2 HighMay 24, 2023
• mitel mivoice connect A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6... CVE-2023-31459 8.8 HighMay 24, 2023
• mitel mivoice connect A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24... CVE-2023-31458 9.8 CriticalMay 24, 2023
• mitel mivoice connect A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 ... CVE-2023-31457 9.8 CriticalMay 24, 2023
• mitel mivoice connect A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x,... CVE-2023-25599 7.4 HighMay 24, 2023
• mitel mivoice connect A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x,... CVE-2023-25598 6.1 MediumMay 24, 2023
• mitel mivoice connect The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an... CVE-2022-41223 In KEV EPSS 10.7% 6.8 MediumNovember 22, 2022
• mitel mivoice connect A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0... CVE-2022-40765 In KEV EPSS 10.6% 6.8 MediumNovember 22, 2022
• mitel mivoice business, mivoice business express +1 more A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice... CVE-2022-31784 9.8 CriticalJune 17, 2022
• mitel mivoice connect The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code... CVE-2022-29499 In KEV EPSS 55.2% 9.8 CriticalApril 26, 2022
• mitel micollab, mivoice business express, micollab, mivoice business express +2 more The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business... CVE-2022-26143 In KEV EPSS 87.3% 9.8 CriticalMarch 9, 2022
• mitel mivoice 6930 firmware, mivoice 6940 firmware +1 more The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3... CVE-2020-27640 8.1 HighDecember 18, 2020
• mitel mivoice connect client A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could... CVE-2020-12456 8.8 HighAugust 26, 2020
• mitel mivoice connect, shoretel conference web +1 more A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web... CVE-2020-12679 6.1 MediumMay 7, 2020
• mitel mivoice connect client A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow... CVE-2020-10377 9.8 CriticalApril 17, 2020
• mitel mivoice connect A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1... CVE-2020-10211 9.8 CriticalApril 17, 2020
• mitel micollab, mivoice business express +1 more A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601)... CVE-2018-18819 5.3 MediumNovember 12, 2019
• mitel mivoice office 400 A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 ... CVE-2018-16226 6.1 MediumOctober 23, 2018
• mitel mivoice 5330e firmware The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet... CVE-2018-15497 9.8 CriticalOctober 23, 2018
• debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 more linux-4.9 - security update CVE-2018-3639 Public exploitFix available EPSS 60.4% 5.5 MediumMay 21, 2018
• mitel mivoice connect, st 14.2 +1 more A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ... CVE-2018-9104 6.1 MediumApril 25, 2018
• mitel mivoice connect, st 14.2 +1 more A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ... CVE-2018-9103 6.1 MediumApril 25, 2018
• mitel mivoice connect, st 14.2 +1 more A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ... CVE-2018-9102 6.5 MediumApril 25, 2018
• mitel mivoice connect, st 14.2 +1 more A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ... CVE-2018-9101 6.1 MediumApril 25, 2018
• openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 more The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle... CVE-2014-0160 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighApril 7, 2014