{"id":"CVE-2026-104809","published":"2026-10-05T09:17:10.007","lastModified":"2026-10-06T15:18:12.170","description":"DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A malicious shared object using the expected name can therefore be loaded by a privileged process. The module code then executes within the context and privileges of that process. This results in arbitrary code execution and full compromise of the Mitel Linux virtual machine.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-73","CWE-426","CWE-427","CWE-494","CWE-829"],"vendors":[],"products":[],"references":[{"url":"https://digitalcanion.com/en/security-research/#vendor=mitel&status=cna","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}