Mitel
In 3 briefs, most recently 27 July 2025. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
7 Mitel vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 5 of them used in ransomware campaigns. Most recent:
- CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability
- CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability
- CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability
- CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability
- CVE-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability
- CVE-2022-29499 Mitel MiVoice Connect Data Validation Vulnerability
- CVE-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability
Coverage in DanSec Daily
- Allianz Life breach, WordPress Post SMTP flaw exposing 200k+ sites, and ToolShell SharePoint exploits.
- Ransomware up 63% in Q2 2025, Amazon's Q Developer VS Code extension hijacked with wiper commands, and a North Korean IT worker laptop-farm sentencing.
- BlackSuit ransomware sites seized, Toptal GitHub breach poisons npm packages, and ToolShell SharePoint flaws hit 400+ servers.