# Mitel OpenScape Endpoint Management flaws patched

Published: 2026-10-28 · Severity: routine · Sectors: Telecommunications
Canonical: https://vorant.io/reports/4cebf372-70c2-5671-a4f7-9f42c34231c2/mitel-openscape-endpoint-management-flaws-patched
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> CERT-FR warns of multiple vulnerabilities in Mitel OpenScape Endpoint Management allowing privilege escalation and security bypass; patch to V1R2.5.1.

Source: cert.cyber.gouv.fr — https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1404

## What to check

- Applies to: The 1 CVE named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

CERT-FR issued an advisory describing multiple vulnerabilities in Mitel OpenScape Endpoint Management affecting versions prior to V1R2.5.1. According to the bulletin, successful exploitation could allow an attacker to bypass security policy controls and escalate privileges within the affected system. The advisory does not indicate that these vulnerabilities are currently being exploited in the wild.

No specific CVE identifiers, technical details, or proof-of-concept information are provided in this bulletin; defenders should consult Mitel's own security advisory (MiSA-2026-0009, published 21 October 2026) for full technical details and affected component breakdowns. Mitel OpenScape Endpoint Management is used for centralized administration of Mitel endpoint devices, often in enterprise telecommunications environments, making unauthorized privilege escalation a concern for environments managing large fleets of VoIP/UC endpoints.

Remediation is straightforward: organizations running affected versions should upgrade to V1R2.5.1 or later as referenced in the vendor bulletin. No workarounds are listed in this advisory beyond patching.

## Mentioned in this report

- Vulnerabilities: CVE-2026-0009

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1404

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/4cebf372-70c2-5671-a4f7-9f42c34231c2/mitel-openscape-endpoint-management-flaws-patched.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup