A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.
2026-01-15T22:16:10.990
2026-01-21T21:06:06.810
Analyzed
CVSSv3.1: 9.4 (CRITICAL)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | mitel | mivoice_mx-one | < 7.8 | Yes |
| Application | mitel | mivoice_mx-one | 7.8 | Yes |
| Application | mitel | mivoice_mx-one | 7.8 | Yes |