CVE-2025-67823: Mitel Cx

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.

Affected products

• Mitel Cx: before 2.0 (fixed in 2.0)
• Mitel Micontact Center Business: before 10.2.0.11 (fixed in 10.2.0.11)

Published 2026-01-15. Last modified 2026-06-17.