Mitel warns of critical MiVoice MX-ONE authentication bypass flaw

Mitel has published security updates addressing a critical authentication-bypass vulnerability in MiVoice MX-ONE Provisioning Manager (affecting versions 7.3 through 7.8 SP1) that could allow unauthenticated attackers to obtain administrator access, and disclosed a high-severity SQL injection in MiCollab (CVE-2025-52914); mitigations include applying vendor patches and restricting access to the services, and the advisory notes past MiCollab flaws that were exploited in the wild.