Skip to content

Products › Brands

Brand

Mitel: actively exploited vulnerabilities

7 vulnerabilities in Mitel products (MiCollab, MiVoice Connect, SIP Phones (6800 / 6900)) are in CISA’s catalog of exploited vulnerabilities. Last added: February 12, 2025.

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Mitel category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Mitel product (MiCollab, MiVoice Connect…) rather than the whole brand.

  • MiCollab3 vulnerabilities, Collaboration and video
  • MiVoice Connect3 vulnerabilities, Collaboration and video
  • SIP Phones (6800 / 6900)1 vulnerability, Collaboration and video

Name used by CISA: Mitel. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Mitel list.

  1. Rank 1

    Mitel MiVoice ConnectCVE-2022-29499

    Mitel MiVoice Connect Data Validation Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 27, 2022

  2. Rank 2

    Mitel MiCollabCVE-2022-26143

    MiCollab, MiVoice Business Express Access Control Vulnerability

    CVSS severity 9.8critical

    Added Mar 25, 2022

  3. Rank 3

    Mitel MiCollabCVE-2024-41713

    Mitel MiCollab Path Traversal Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added Jan 7, 2025

  4. Rank 4

    Mitel SIP Phones (6800 / 6900)CVE-2024-41710

    Mitel SIP Phones Argument Injection Vulnerability

    CVSS severity 7.2high

    Added Feb 12, 2025

  5. Rank 5

    Mitel MiVoice ConnectCVE-2022-40765

    Mitel MiVoice Connect Command Injection Vulnerability

    Ransomware

    CVSS severity 6.8medium

    Added Feb 21, 2023

  6. Rank 6

    Mitel MiVoice ConnectCVE-2022-41223

    Mitel MiVoice Connect Code Injection Vulnerability

    Ransomware

    CVSS severity 6.8medium

    Added Feb 21, 2023

  7. Rank 7

    Mitel MiCollabCVE-2024-55550

    Mitel MiCollab Path Traversal Vulnerability

    Ransomware

    CVSS severity 2.7low

    Added Jan 7, 2025

Follow and verify

Get new Mitel vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.