Information Disclosure Vulnerability in Mitel MiContact Center Business

CVE-2025-27827

What is CVE-2025-27827?

A vulnerability exists in the legacy chat component of Mitel MiContact Center Business that can allow unauthenticated attackers to conduct information disclosure attacks. This issue arises from improper handling of session data, requiring user interaction to exploit. Once successfully exploited, an attacker might gain access to sensitive information, potentially allowing unauthorized entry into active chat rooms, reading ongoing chat data, and sending messages within an active chat session.

References