Multiple vulnerabilities in Mitel products (July 23, 2026)

unknown

Multiple vulnerabilities have been discovered in Mitel products. They allow an attacker to cause remote arbitrary code execution and remote indirect code injection (XSS).

CSIRTS triage

What: Multiple vulnerabilities allow an attacker to cause remote arbitrary code execution and remote indirect code injection (XSS).
Who is affected: Deployments of Mitel products are affected.
Urgency: Remediation is urgent due to the potential for remote code execution.
Action: Apply available patches as they are released.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-07-23
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0911/

Multiple vulnerabilities in Mitel products (July 23, 2026)

CSIRTS triage

Details

More from CERT-FR Avis de sécurité