Exploited vulnerabilities
Mitel
7 Mitel vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue7
Last 12 months0
In ransomware campaigns5
Last addition12 February 2025
The vulnerabilities7
- 12 February 2025CVE-2024-41710SIP PhonesMitel SIP Phones Argument Injection Vulnerability
- 7 January 2025CVE-2024-55550MiCollabMitel MiCollab Path Traversal VulnerabilityRansomware
- 7 January 2025CVE-2024-41713MiCollabMitel MiCollab Path Traversal VulnerabilityRansomware
- 21 February 2023CVE-2022-41223MiVoice ConnectMitel MiVoice Connect Code Injection VulnerabilityRansomware
- 21 February 2023CVE-2022-40765MiVoice ConnectMitel MiVoice Connect Command Injection VulnerabilityRansomware
- 27 June 2022CVE-2022-29499MiVoice ConnectMitel MiVoice Connect Data Validation VulnerabilityRansomware
- 25 March 2022CVE-2022-26143MiCollab, MiVoice Business ExpressMiCollab, MiVoice Business Express Access Control Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Mitel included.