CERT-FR advisory CERTFR-2026-AVI-1404: multiple vulnerabilities in Mitel OpenScape Endpoint Management
CERT-FR published advisory CERTFR-2026-AVI-1404 on 28 October 2026 relaying Mitel security bulletin MISA-2026-0009 of 21 October 2026. Multiple vulnerabilities affect Mitel OpenScape Endpoint Management in versions prior to V1R2.5.1. Exploitation can lead to privilege escalation and security policy bypass. No CVE identifiers, exploitation activity or technical details are provided in the advisory.
Entenda a falha
A vulnerabilidade
Mitel disclosed multiple vulnerabilities in OpenScape Endpoint Management in bulletin MISA-2026-0009 (21 October 2026), relayed by CERT-FR as CERTFR-2026-AVI-1404 on 28 October 2026. According to the advisory, an attacker can achieve privilege escalation and bypass the security policy. No CVE IDs, CVSS scores, individual flaw descriptions or attacker prerequisites (network reach, authentication, user interaction) are given. All versions before V1R2.5.1 are affected; the fix is V1R2.5.1 or later.
Como foi descoberta
The CERT-FR advisory only says that multiple vulnerabilities were discovered in the product. It does not say who found them or how, nor whether they were reported privately. It reached the public through the vendor's security bulletin MISA-2026-0009 of 21 October 2026 and CERT-FR's relay a week later. The advisory mentions no exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 29/10/2026 13:27.
Remediação
- Upgrade OpenScape Endpoint Management to V1R2.5.1 or later following Mitel bulletin MISA-2026-0009.
Linha do tempo
-
CERT-FR advisory CERTFR-2026-AVI-1404: multiple vulnerabilities in Mitel OpenScape Endpoint Management
ler a análise desta fonte ocultar
CERT-FR published advisory CERTFR-2026-AVI-1404 on 28 October 2026 relaying Mitel security bulletin MISA-2026-0009 of 21 October 2026. Multiple vulnerabilities affect Mitel OpenScape Endpoint Management in versions prior to V1R2.5.1. Exploitation can lead to privilege escalation and security policy bypass. No CVE identifiers, exploitation activity or technical details are provided in the advisory.
Remediation
- Upgrade OpenScape Endpoint Management to V1R2.5.1 or later following Mitel bulletin MISA-2026-0009.