CVE-2026-104805: DigitalCanion security flaw

Affected technology

Mitel MiVoice Office 400 · 11.0.96.0
Mitel

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · No user interaction required

What an attacker can do

An attacker with access to the configured backup repository can introduce arbitrary files into the system during restoration. Vendor/CNA’s CVSS 4.0 assessment rates confidentiality, integrity and availability impact as high.