CVE-2022-41326

—

CVSS 3.1

9.8 critical

EPSS

1%p71

Published

Nov 22, 2022 (Nov 22, 2022)

Modified

Jun 17, 2026

Description

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application.

Vendors: mitel
Products: micollab
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.