CVE-2024-41713

Mitel MiCollab's path traversal flaw allows unauthenticated attackers to bypass security controls and chain with CVE-2024-55550 for full server compromise.

Mitel MiCollab contains a path traversal vulnerability enabling unauthenticated, unauthorized access that can be chained with CVE-2024-55550 to read arbitrary files and execute code. DIB organizations must patch immediately as this is actively exploited in the wild and linked to ransomware campaigns. Failure to patch exposes sensitive data and violates CMMC/NIST 800-171 requirements for timely vulnerability management.

Shame score — A critical path traversal flaw in a collaboration platform was actively exploited in the wild and linked to ransomware, demonstrating severe negligence in patching known vulnerabilities.