Cloudanix VulnDB

CVE-2025-67822

Critical · 9.4

CVSS

9.4

EPSS

0.4%

Published

Jan 15, 2026

CISA due date

—

The record

A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.

Affected packages

Ecosystem Package Introduced Fixed