CVE-2023-31460: Mitel MiVoice Connect

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficient restriction on URL parameters.

Affected products

• Mitel MiVoice Connect: up to and including 9.6.2208.101

Published 2023-05-24. Last modified 2026-06-17.