PT-2026-104774
CVE-2026-104809
·
Published
2026-10-05
·
Updated
2026-10-05
Description by
CVSS 4.0
8.4
HighMetricsAV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Amber
Name of the Vulnerable Software and Affected Versions
Mitel MiVoice Office 400 (affected versions not specified)
Description
A flaw allows an attacker to force the system to load a malicious .so file (a shared object library) instead of the intended legitimate module. This occurs because the loading mechanism uses a predictable module name and fails to verify the file's origin or integrity. Consequently, a privileged process may load the malicious shared object, executing the code within that process's context and privileges, leading to arbitrary code execution and full compromise of the Mitel Linux virtual machine.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾