CVE-2026-104811

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Office 400 (affected versions not specified)

Description A flaw in the web portal listening on TCP port 443 allows remote attackers to execute arbitrary code, potentially requiring authentication. The issue resides in the Configuration → Services → Music on Hold functionality, where the application fails to properly validate uploaded file types. While intended for WAV audio files, an attacker can upload a malicious shared object (.so) file. When the system processes this file, the attacker-controlled code is executed within the process context, which may lead to a full compromise of the underlying Linux system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the Configuration → Services → Music on Hold functionality to minimize the risk of exploitation.