Vendor History

Business phones and messaging

Mitel security incident history

Updated . Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 7 actively exploited security flaws for Mitel, dated Mar 25, 2022 to Feb 12, 2025. Sources checked: the California and Washington Attorney General breach lists and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

None found in the sources we check.

Got a breach letter from Mitel? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Mitel products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

  1. Exploited flaw

    Mitel SIP Phones Argument Injection Vulnerability (CVE-2024-41710). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

  2. Exploited flaw

    Mitel MiCollab Path Traversal Vulnerability (CVE-2024-41713). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

  3. Exploited flaw

    Mitel MiCollab Path Traversal Vulnerability (CVE-2024-55550). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

  4. Exploited flaw

    Mitel MiVoice Connect Command Injection Vulnerability (CVE-2022-40765). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

  5. Exploited flaw

    Mitel MiVoice Connect Code Injection Vulnerability (CVE-2022-41223). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

  6. Exploited flaw

    Mitel MiVoice Connect Data Validation Vulnerability (CVE-2022-29499). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

  7. Exploited flaw

    MiCollab, MiVoice Business Express Access Control Vulnerability (CVE-2022-26143). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Mitel security incident history," vendorhistory.com/vendor/mitel, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.