References https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0008 https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2026-0002 https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0028 https://www.sentinelone.com/vulnerability-database/cve-2024-47223/ https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/critical-security-vulnerabilities-affecting-mitel-micollab-version-98-sp1-fp2-981201-and-earlier-versions https://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day/ https://censys.com/advisory/cve-2024-35286/ https://www.mitel.com/support/security-advisories https://www.sentinelone.com/vulnerability-database/cve-2024-35286/ https://github.com/projectdiscovery/nuclei-templates/issues/13054 https://www.upguard.com/blog/mitel-micollab-vulnerabilities https://avd.aliyun.com/detail?id=AVD-2024-35286 http://www.sxxdckj.com/cms/a/Mitel-MiCollab-SQL-zhu-ru-lou-dong-CNVD-2024-42932.html https://www.anquanke.com/post/id/300846
Related VulnerabilitiesPoCCVE-2025-47188: Mitel 6000 - OS Command InjectionMitel /sysinfo.html 默认口令漏洞PoCCVE-2020-11798: Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory TraversalPoCCVE-2020-28351: Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site ScriptingPoCCVE-2024-41713: Mitel MiCollab - Authentication BypassPoCCVE-2024-55550: Mitel MiCollab - Arbitary File ReadPoCCVE-2024-41713: MitelMiCollab 身份绕过导致任意文件读取漏洞PoCCVE-2024-35286: Mitel MiCollab <= 9.8.0.33 - SQL InjectionPoCmitel-6000-default-login: Mitel 6000 - Default LoginPoCCVE-2022-26143: Mitel MiCollab - Information Disclosure & Denial of ServiceMitel MiCollab /npm-pwg/..;/ReconcileWizard/reconcilewizard/sc/IDACall 文件读取漏洞(CVE-2024-41713)Mitel MiCollab 协作平台 存在任意文件读取漏洞(CVE-2024-41713)