CVE-2022-26143

unknown KEV

Published 2022-03-25 · Modified 2022-03-25

CVSS v3

—

CVSS v2

—

VIR risk

1.5

Description

A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.

CISA KEV

Vendor: Mitel
Product: MiCollab, MiVoice Business Express
Due date: 2022-04-15

Predictions

Exploit likelihood

99%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cisa-kev — https://nvd.nist.gov/vuln/detail/CVE-2022-26143

Exploits

References

https://nvd.nist.gov/vuln/detail/CVE-2022-26143

Verify integrity in audit chain (admin only). AS-IS.