https://patchfirst.co/vendor/mitel/New and newly exploited Mitel CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2024-41710/CVE-2024-41710#kevWed, 12 Feb 2025 00:00:00 GMTMitel · SIP Phones. In CISA KEV since 2025-02-12. ENISA EUVD lists it as exploited. EPSS 41.6% (higher than 98.7% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 67.8 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2024-41713/CVE-2024-41713#kevTue, 07 Jan 2025 00:00:00 GMTMitel · MiCollab. In CISA KEV since 2025-01-07, known ransomware use. ENISA EUVD lists it as exploited. EPSS 97.2% (higher than 99.89% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 79.3 of 100.kevransomwarepublic-exploitT1068T1005https://patchfirst.co/cve/CVE-2024-55550/CVE-2024-55550#kevTue, 07 Jan 2025 00:00:00 GMTMitel · MiCollab. In CISA KEV since 2025-01-07, known ransomware use. ENISA EUVD lists it as exploited. EPSS 38.2% (higher than 98.6% of CVEs). CVSS 2.7 LOW. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1041 Exfiltration Over C2 Channel. Priority 74.6 of 100.kevransomwarepublic-exploitT1190T1005T1041https://patchfirst.co/cve/CVE-2022-41223/CVE-2022-41223#kevTue, 21 Feb 2023 00:00:00 GMTMitel · MiVoice Connect. In CISA KEV since 2023-02-21, known ransomware use. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 71.9 of 100.kevransomwareT1190T1059https://patchfirst.co/cve/CVE-2022-40765/CVE-2022-40765#kevTue, 21 Feb 2023 00:00:00 GMTMitel · MiVoice Connect. In CISA KEV since 2023-02-21, known ransomware use. ENISA EUVD lists it as exploited. EPSS 10.6% (higher than 95.8% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 71.9 of 100.kevransomwareT1190T1059https://patchfirst.co/cve/CVE-2022-29499/CVE-2022-29499#kevMon, 27 Jun 2022 00:00:00 GMTMitel · MiVoice Connect. In CISA KEV since 2022-06-27, known ransomware use. ENISA EUVD lists it as exploited. EPSS 55.2% (higher than 99.03% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.7 of 100.kevransomwareT1190T1059https://patchfirst.co/cve/CVE-2022-26143/CVE-2022-26143#kevFri, 25 Mar 2022 00:00:00 GMTMitel · MiCollab, MiVoice Business Express. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 87.3% (higher than 99.75% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1498 Network Denial of Service. Priority 69.8 of 100.kevpublic-exploitT1190T1498