CVE-2026-104810

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Office 400 (affected versions not specified)

Description An authenticated remote attacker can delete sensitive files on the system via a directory traversal flaw. This issue occurs within the web portal on TCP port 443, specifically under the Maintenance → File Management → File Browser section. Directory traversal is a technique that allows an attacker to access files and directories that are stored outside the web root folder. By exploiting this, an attacker can access and delete files belonging to the application and the underlying Linux system, which may lead to a denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.