Mitel MiCollab Unauthorized Access Attack

Multiple critical vulnerabilities in the Mitel MiCollab enterprise communications platform — including an SQL injection (CVE-2024-35286), a path traversal (CVE-2024-41713), and an authenticated arbitrary file-read zero-day — have been identified and a PoC demonstrates how they can be chained to access and steal sensitive data; vendor patches are available for the two CVEs and organizations should immediately apply updates and monitor for further advisories.