CVE-2026-104810: CWE-31 Path traversal: 'dir\..\..\filename' in Mitel Mitel MiVoice Office 400

This vulnerability exists in the web portal of Mitel MiVoice Office 400, specifically under Maintenance → File Management → File Browser, accessible on TCP port 443. An authenticated attacker can exploit a directory traversal flaw (CWE-31) to delete files outside the designated directory, including those belonging to the Mitel application and the underlying Linux system. Such deletions can cause denial-of-service conditions by disrupting critical system or application functionality. The vulnerability affects version 11.0.96.0 of the product. The CVSS 4.0 base score is 8.4, indicating high severity, with attack vector local, low attack complexity, no user interaction, and requiring high privileges.

An authenticated attacker can delete sensitive files outside the intended directory, including critical system and application files. This can result in denial-of-service conditions affecting the underlying system and the Mitel application, potentially disrupting business operations relying on this system.

No patch or official fix information is provided in the vendor advisory or input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the web portal to trusted administrators only and monitor for suspicious file deletion activity.