Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-104810— Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

Quick assessment

Affected
Mitel Mitel MiVoice Office 400
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

该漏洞允许远程攻击者在易受攻击的 Mitel MiVoice Office 400 安装环境中删除敏感文件。攻击该漏洞需要身份验证。 具体的漏洞存在于监听 TCP 443 端口的 Web 门户中，位于“维护（Maintenance）”→“文件管理（File Management）”→“文件浏览器（File Browser）”功能模块，该模块存在目录遍历漏洞。通过利用此漏洞，已身份验证的攻击者可以访问并删除预期目录之外的文件，包括属于 Mitel 应用程序以及底层 Linux 系统的文件。删除关键系统文件或应用程序文

CVSS 8.4 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-104810

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management → File Browser, which is affected by a directory traversal vulnerability. By exploiting this vulnerability, an authenticated attacker can access and delete files outside of the intended directory, including files belonging to the Mitel application and the underlying Linux system. Deleting critical system or application files can result in a denial-of-service condition affecting the underlying system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Amber
Source: CVE Program / CVE List V5
Vulnerability Type
路径遍历：’dir....filename’
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Mitel Mitel MiVoice Office 400 11.0.96.0 -

II. Public POCs for CVE-2026-104810

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-104810

请登录查看更多情报信息。

Other References for CVE-2026-104810 (1)

Same Patch Batch · Mitel · 2026-10-05 · 8 CVEs total

CVE-2026-104805 8.5 HIGH Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Exec
CVE-2026-104706 8.4 HIGH Mitel MiVoice Office 400 view system files path traversal
CVE-2026-104809 8.4 HIGH Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution
CVE-2026-104811 8.4 HIGH Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution
CVE-2026-104806 5.5 MEDIUM Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure
CVE-2026-104807 1.9 LOW Mitel MiVoice Office 400 stored Cross-Site Scripting
CVE-2026-104808 1.9 LOW Mitel MiVoice Office 400 stored Cross-Site Scripting

IV. Related Vulnerabilities

Same product: Mitel MiVoice Office 400
Same vendor: Mitel
Same weakness: CWE-31

V. Comments for CVE-2026-104810

No comments yet

Leave a comment