CVE-2025-67822
Critical · 9.4CVSS
9.4
EPSS
0.4%
Published
Jan 15, 2026
CISA due date
—
The record
A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|