Multiples vulnérabilités dans les produits Mitel (23 juillet 2026)
Multiple vulnerabilities have been discovered in Mitel products, allowing attackers to execute arbitrary code remotely and inject malicious code via XSS. These vulnerabilities affect various versions of MiCollab and Openscape UC, requiring immediate patching to prevent exploitation.
Multiple security vulnerabilities have been identified within Mitel’s products, presenting significant risks to organizations relying on these communications solutions. Specifically, attackers can now remotely execute arbitrary code and inject cross-site scripting (XSS) attacks. These vulnerabilities impact several versions of MiCollab, including versions prior to 10.2 SP1 FP2 (10.2.1.205), versions prior to 10.3.0.18, and versions prior to 9.8 SP3 FP2 (9.8.3.203). Additionally, Openscape UC versions V10 prior to V10 R6 FR18 and V11 prior to V11 R1 FR2 are also affected. The CERT-FR advisory highlights the need for immediate action to address these security flaws. Users are directed to consult the Mitel security advisory (https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2026-0006 and https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2026-0007) for details on available patches and mitigation steps.