← Database

CVE-2022-41326

CRITICAL CVSS: 9.8 Published: 2022-11-22 Modified: 2026-06-17

Description

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application.

Affected Platforms

Mitel Micollab

Weakness Type

NVD-CWE-Other, CWE-862

References