CVE-2026-104806: CWE-31 Path traversal: 'dir\..\..\filename' in Mitel Mitel MiVoice Office 400

This vulnerability (CWE-31) exists in the Mitel MiVoice Office 400 web management portal's system logs feature, which listens on TCP port 443. The application does not properly validate user-supplied file paths, enabling an attacker to perform directory traversal by using sequences like 'dir\..\..\filename'. Exploitation allows access to files outside the designated logs directory, potentially exposing sensitive information. The vulnerability requires high privileges to exploit and does not involve user interaction. It is currently published with no known exploits in the wild and no vendor patch information available.

An attacker with high privileges can exploit this vulnerability to read arbitrary files outside the intended system logs directory. This may result in unauthorized disclosure of sensitive system and application files, potentially aiding further attacks or information gathering. The vulnerability does not allow privilege escalation or denial of service directly but compromises confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the web management portal and ensure only trusted administrators have high privileges. Monitor for unusual file access patterns related to system logs functionality.