Mitel vulnerabilities in CISA KEV
Mitel has 7 vulnerabilities in CISA's catalogue of flaws known to be exploited, the 36th highest of any vendor. none were added in the last 12 months; 5 are linked to known ransomware use (71.4% of its entries, against 20.4% across the catalogue). CISA's median fix window for these entries is 21 days (range 21 to 21), against 21 days (range 1 to 184) across the whole catalogue. The most exploited product is MiVoice Connect, with 3 entries. Other frequently affected products: MiCollab (2); MiCollab, MiVoice Business Express (1).
Catalog v2026.11.04, released 5 Nov 2026. Source CISA ↗. All KEV entries.
$ ./kev --vendor mitel --summary
Counts are computed from the catalog release on ; the 12 month window ends there.
┌─ total entries
7
in CISA KEV
┌─ first added
2022-03-25
earliest entry
┌─ latest added
2025-02-12
most recent entry
┌─ last 12 months
0
entries added
┌─ ransomware use
5 of 7
71.4% linked to ransomware
┌─ distinct products
4
affected products
$ awk -F, {print $1} /var/log/kev/mitel.log | uniq -c
Entries by the year CISA added them.
| Year | Entries added | Of which ransomware |
|---|---|---|
| 2022 | 2 | 1 |
| 2023 | 2 | 2 |
| 2025 | 3 | 2 |
$ sort /var/log/kev/mitel.log | uniq -c | sort -rn | head -5
The five products with the most entries in the catalogue.
- MiVoice Connect 3 entries
- MiCollab 2 entries
- MiCollab, MiVoice Business Express 1 entry
- SIP Phones 1 entry
$ kev-due-dates --vendor mitel
Days between the date CISA added an entry and the due date it set, median and range. Due dates apply to US federal agencies; for everyone else they are a patch-first ranking signal.
┌─ Mitel
21 days (range 21 to 21)
median and range in days
┌─ whole catalogue
21 days (range 1 to 184)
median and range in days
$ grep -o 'CWE-[0-9]*' /var/log/kev/mitel.log | sort | uniq -c | sort -rn | head -3
Weakness types CISA records for these entries (7 of 7 have at least one CWE).
$ grep -ril 'Mitel' /var/log/news | head -5
Our reporting that names Mitel or one of its KEV CVE ids, newest first.
┌─ /var/log/news
Patch Week pages with these entries
No Patch Week page covers this vendor yet.
$ wc -l ./mitel.kev · 7 rows
Descriptions: CISA Known Exploited Vulnerabilities catalogue
- CVE-2024-41710
SIP Phones
Mitel SIP Phones Argument Injection Vulnerability
due 2025-03-05 · CWE-88
$ cat CVE-2024-41710.txt
Description. Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2024-41713
MiCollab [RANSOMWARE]
Mitel MiCollab Path Traversal Vulnerability
due 2025-01-28 · CWE-22
$ cat CVE-2024-41713.txt
Description. Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2024-55550
MiCollab [RANSOMWARE]
Mitel MiCollab Path Traversal Vulnerability
due 2025-01-28 · CWE-22
$ cat CVE-2024-55550.txt
Description. Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2022-40765
MiVoice Connect [RANSOMWARE]
Mitel MiVoice Connect Command Injection Vulnerability
due 2023-03-14 · CWE-77
$ cat CVE-2022-40765.txt
Description. The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.
Required action. Apply updates per vendor instructions.
- CVE-2022-41223
MiVoice Connect [RANSOMWARE]
Mitel MiVoice Connect Code Injection Vulnerability
due 2023-03-14 · CWE-94
$ cat CVE-2022-41223.txt
Description. The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.
Required action. Apply updates per vendor instructions.
- CVE-2022-29499
MiVoice Connect [RANSOMWARE]
Mitel MiVoice Connect Data Validation Vulnerability
due 2022-07-18 · CWE-20
$ cat CVE-2022-29499.txt
Description. The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.
Required action. Apply updates per vendor instructions.
- CVE-2022-26143
MiCollab, MiVoice Business Express
MiCollab, MiVoice Business Express Access Control Vulnerability
due 2022-04-15 · CWE-306 CWE-406
$ cat CVE-2022-26143.txt
Description. A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.
Required action. Apply updates per vendor instructions.