CVE-2022-41326: Mitel MiCollab

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application.

Affected products

• Mitel MiCollab: up to and including 9.6.0.105

Published 2022-11-22. Last modified 2026-06-17.