CVE-2026-104809

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Office 400 (affected versions not specified)

Description A flaw allows an attacker to force the system to load a malicious .so file (a shared object library) instead of the intended legitimate module. This occurs because the loading mechanism uses a predictable module name and fails to verify the file's origin or integrity. Consequently, a privileged process may load the malicious shared object, executing the code within that process's context and privileges, leading to arbitrary code execution and full compromise of the Mitel Linux virtual machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.