Mitel MiCollab Multiple Critical Vulnerabilities Including SQL Injection CVSS 9.8

CERT-Bund published security advisory WID-SEC-2026-1026 disclosing multiple critical vulnerabilities in Mitel MiCollab communication suite. The vulnerabilities include SQL injection flaws enabling remote attackers to execute arbitrary SQL commands and escalate privileges. With a CVSS Base Score of 9.8 (critical) and Temporal Score of 8.5 (high), these represent severe security risks. Affected products include MiCollab versions prior to 10.2 SP1 across Linux, UNIX, Windows, and other operating systems.

Organizations running Mitel MiCollab must immediately identify affected deployments and apply available patches or mitigation measures. Failure to address these vulnerabilities could allow unauthorized remote attackers to compromise database integrity, access sensitive communications data, and elevate privileges within the system. Security teams should prioritize patching and implement compensating controls such as network segmentation and enhanced monitoring.