CVE-2026-104809: CWE-73 External control of file name or path in Mitel Mitel MiVoice Office 400

This vulnerability involves external control of the file name or path (CWE-73) in the Mitel MiVoice Office 400 product. The loading mechanism for modules relies on predictable module names without verifying the origin or integrity of the .so files. An attacker can place a malicious shared object with the expected name, which is then loaded by a privileged process. The malicious code executes with the privileges of that process, enabling arbitrary code execution and full system compromise. The affected version is 11.0.96.0. The CVSS 4.0 base score is 8.4, indicating high severity, with attack vector local, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation results in arbitrary code execution with the privileges of a high-privileged process on the Mitel Linux virtual machine, leading to full system compromise. This can allow attackers to control the affected system entirely.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for unauthorized file modifications related to module loading.