{"schema_version":1,"title":"Mitel MiVoice Office 400 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Mitel MiVoice Office 400: 0 in the last 7 days and 8 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-104811, was published on 5 October 2026. Nothing in the last four weeks, down from 8 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/mivoice-office-400","json_url":"https://junglewise.ai/threats/technologies/mivoice-office-400.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/mivoice-office-400","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":8,"last_365_days":8},"latest":[{"cve":"CVE-2026-104811","epss":0.002,"slug":"cve-2026-104811-digitalcanion-sa-has-discovered-a-vulnerability-that-allows","title":"Mitel MiVoice Office 400 code execution via WAV file upload","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:10.29+00:00","url":"https://junglewise.ai/threats/cve-2026-104811-digitalcanion-sa-has-discovered-a-vulnerability-that-allows"},{"cve":"CVE-2026-104810","epss":0.0035,"slug":"cve-2026-104810-this-vulnerability-allows-remote-attackers-to-delete-sensitive","title":"Mitel MiVoice Office 400 path traversal in file browser","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:10.153+00:00","url":"https://junglewise.ai/threats/cve-2026-104810-this-vulnerability-allows-remote-attackers-to-delete-sensitive"},{"cve":"CVE-2026-104809","epss":0.0009,"slug":"cve-2026-104809-digitalcanion-has-discovered-a-vulnerability-that-allows-an","title":"Mitel MiVoice Office 400 shared object hijacking arbitrary code execution","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:10.007+00:00","url":"https://junglewise.ai/threats/cve-2026-104809-digitalcanion-has-discovered-a-vulnerability-that-allows-an"},{"cve":"CVE-2026-104808","epss":0.0025,"slug":"cve-2026-104808-digitalcanion-has-discovered-a-stored-cross-site-scripting-xss","title":"Mitel MiVoice Office 400 stored XSS in Exchange mailbox field","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.87+00:00","url":"https://junglewise.ai/threats/cve-2026-104808-digitalcanion-has-discovered-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-104807","epss":0.0025,"slug":"cve-2026-104807-digitalcanion-has-discovered-a-stored-cross-site-scripting-xss","title":"Mitel MiVoice Office 400 stored XSS in Domains description","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.69+00:00","url":"https://junglewise.ai/threats/cve-2026-104807-digitalcanion-has-discovered-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-104806","epss":0.0031,"slug":"cve-2026-104806-digitalcanion-has-discovered-a-path-traversal-vulnerability-that","title":"Mitel MiVoice Office 400 path traversal in System Logs","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.54+00:00","url":"https://junglewise.ai/threats/cve-2026-104806-digitalcanion-has-discovered-a-path-traversal-vulnerability-that"},{"cve":"CVE-2026-104805","epss":0.0022,"slug":"cve-2026-104805-digitalcanion-has-discovered-a-vulnerability-in-the-backup","title":"Mitel MiVoice Office 400 backup restoration arbitrary file write","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.38+00:00","url":"https://junglewise.ai/threats/cve-2026-104805-digitalcanion-has-discovered-a-vulnerability-in-the-backup"},{"cve":"CVE-2026-104706","epss":0.0014,"slug":"cve-2026-104706-digitalcanion-has-discovered-a-path-traversal-vulnerability-that","title":"Mitel MiVoice Office 400 path traversal in administration logs","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.167+00:00","url":"https://junglewise.ai/threats/cve-2026-104706-digitalcanion-has-discovered-a-path-traversal-vulnerability-that"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Mitel MiCollab","slug":"micollab","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/micollab"},{"name":"Mitel MiVoice Business Express","slug":"mivoice-business-express","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/mivoice-business-express"},{"name":"Mitel MiVoice Connect","slug":"mivoice-connect","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/mivoice-connect"}],"technology":{"hub":true,"name":"Mitel MiVoice Office 400","slug":"mivoice-office-400","vendor":{"hub":true,"name":"Mitel","slug":"mitel","url":"https://junglewise.ai/threats/vendors/mitel"},"aliases":[],"category":"unified-communications-appliance","homepage":"https://www.mitel.com/","description":"Business telephone system providing voice, messaging, and unified communications for enterprises.","url":"https://junglewise.ai/threats/technologies/mivoice-office-400"},"most_severe":[{"cve":"CVE-2026-104810","epss":0.0035,"slug":"cve-2026-104810-this-vulnerability-allows-remote-attackers-to-delete-sensitive","title":"Mitel MiVoice Office 400 path traversal in file browser","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:10.153+00:00","url":"https://junglewise.ai/threats/cve-2026-104810-this-vulnerability-allows-remote-attackers-to-delete-sensitive"},{"cve":"CVE-2026-104806","epss":0.0031,"slug":"cve-2026-104806-digitalcanion-has-discovered-a-path-traversal-vulnerability-that","title":"Mitel MiVoice Office 400 path traversal in System Logs","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.54+00:00","url":"https://junglewise.ai/threats/cve-2026-104806-digitalcanion-has-discovered-a-path-traversal-vulnerability-that"},{"cve":"CVE-2026-104808","epss":0.0025,"slug":"cve-2026-104808-digitalcanion-has-discovered-a-stored-cross-site-scripting-xss","title":"Mitel MiVoice Office 400 stored XSS in Exchange mailbox field","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.87+00:00","url":"https://junglewise.ai/threats/cve-2026-104808-digitalcanion-has-discovered-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-104807","epss":0.0025,"slug":"cve-2026-104807-digitalcanion-has-discovered-a-stored-cross-site-scripting-xss","title":"Mitel MiVoice Office 400 stored XSS in Domains description","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.69+00:00","url":"https://junglewise.ai/threats/cve-2026-104807-digitalcanion-has-discovered-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-104805","epss":0.0022,"slug":"cve-2026-104805-digitalcanion-has-discovered-a-vulnerability-in-the-backup","title":"Mitel MiVoice Office 400 backup restoration arbitrary file write","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.38+00:00","url":"https://junglewise.ai/threats/cve-2026-104805-digitalcanion-has-discovered-a-vulnerability-in-the-backup"},{"cve":"CVE-2026-104811","epss":0.002,"slug":"cve-2026-104811-digitalcanion-sa-has-discovered-a-vulnerability-that-allows","title":"Mitel MiVoice Office 400 code execution via WAV file upload","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:10.29+00:00","url":"https://junglewise.ai/threats/cve-2026-104811-digitalcanion-sa-has-discovered-a-vulnerability-that-allows"},{"cve":"CVE-2026-104706","epss":0.0014,"slug":"cve-2026-104706-digitalcanion-has-discovered-a-path-traversal-vulnerability-that","title":"Mitel MiVoice Office 400 path traversal in administration logs","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:09.167+00:00","url":"https://junglewise.ai/threats/cve-2026-104706-digitalcanion-has-discovered-a-path-traversal-vulnerability-that"},{"cve":"CVE-2026-104809","epss":0.0009,"slug":"cve-2026-104809-digitalcanion-has-discovered-a-vulnerability-that-allows-an","title":"Mitel MiVoice Office 400 shared object hijacking arbitrary code execution","severity":"info","exploited":false,"published_at":"2026-10-05T09:17:10.007+00:00","url":"https://junglewise.ai/threats/cve-2026-104809-digitalcanion-has-discovered-a-vulnerability-that-allows-an"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}