CVE-2026-104706: CWE-31 Path traversal: 'dir\..\..\filename' in Mitel Mitel MiVoice Office 400

CVE-2026-104706 is a path traversal vulnerability discovered by DigitalCanion in Mitel MiVoice Office 400 version 11.0.96.0. The vulnerability allows an attacker with high privileges and local access to the web portal (https://<ip>:8443) to traverse directories using sequences like 'dir\..\..\filename' and thereby view or download sensitive system files through the Administration -> View Logs interface. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, availability, and system components.

An attacker with high privileges on the system can exploit this vulnerability to access sensitive system files that should otherwise be protected. This could lead to information disclosure and potentially aid further attacks or system compromise. The vulnerability requires local access and high privileges, limiting the attack surface to authorized users with elevated rights.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict access to the affected portal and ensure that only trusted, authorized users have high privilege accounts. Monitor for updates from Mitel regarding a fix.