CVE-2022-41326: Critical severity Mitel MiCollab vulnerability

Published Nov 22, 2022
·
Updated

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application.

Affected Software

1 affected component
Mitel MiCollab<=9.6.0.105

Event History

Nov 22, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is CVE-2022-41326?

CVE-2022-41326 is a vulnerability in the web conferencing component of Mitel MiCollab that could allow an unauthenticated attacker to upload arbitrary scripts, leading to remote code execution.

2

What is the severity of CVE-2022-41326?

CVE-2022-41326 has a severity rating of 9.8, which is considered critical.

3

How does CVE-2022-41326 impact Mitel MiCollab?

CVE-2022-41326 could allow an unauthenticated attacker to upload arbitrary scripts, potentially leading to remote code execution within the Mitel MiCollab application.

4

How can I fix CVE-2022-41326?

To fix CVE-2022-41326, you should apply the latest security patch or update provided by Mitel for the affected version of MiCollab.

5

Where can I find more information about CVE-2022-41326?

You can find more information about CVE-2022-41326 in the Mitel Product Security Advisory 22-0009, available on the Mitel support website.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203