Brand
Mitel: actively exploited vulnerabilities
7 vulnerabilities in Mitel products (MiCollab, MiVoice Connect, SIP Phones (6800 / 6900)) are in CISA’s catalog of exploited vulnerabilities. Last added: February 12, 2025.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
0 vulnerabilities added in the last 12 months
-
7 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Mitel category to your radar, or open its page.
- Collaboration, telephony and video conferencing 7 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single Mitel product (MiCollab, MiVoice Connect…) rather than the whole brand.
- MiCollab3 vulnerabilities, Collaboration and video
- MiVoice Connect3 vulnerabilities, Collaboration and video
- SIP Phones (6800 / 6900)1 vulnerability, Collaboration and video
Name used by CISA: Mitel. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Mitel list.
- Rank 1
Mitel MiVoice ConnectCVE-2022-29499
Mitel MiVoice Connect Data Validation Vulnerability
Ransomware
CVSS severity 9.8critical
Added Jun 27, 2022
- Rank 2
Mitel MiCollabCVE-2022-26143
MiCollab, MiVoice Business Express Access Control Vulnerability
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 3
Mitel MiCollabCVE-2024-41713
Mitel MiCollab Path Traversal Vulnerability
Ransomware
CVSS severity 9.1critical
Added Jan 7, 2025
- Rank 4
Mitel SIP Phones (6800 / 6900)CVE-2024-41710
Mitel SIP Phones Argument Injection Vulnerability
CVSS severity 7.2high
Added Feb 12, 2025
- Rank 5
Mitel MiVoice ConnectCVE-2022-40765
Mitel MiVoice Connect Command Injection Vulnerability
Ransomware
CVSS severity 6.8medium
Added Feb 21, 2023
- Rank 6
Mitel MiVoice ConnectCVE-2022-41223
Mitel MiVoice Connect Code Injection Vulnerability
Ransomware
CVSS severity 6.8medium
Added Feb 21, 2023
- Rank 7
Mitel MiCollabCVE-2024-55550
Mitel MiCollab Path Traversal Vulnerability
Ransomware
CVSS severity 2.7low
Added Jan 7, 2025
Follow and verify
Get new Mitel vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.