CVE-2026-104809
HighCVSS 8.4Summary
A vulnerability was discovered in DigitalCanion's product where a privileged process loads an attacker-controlled .so file with a predictable module name without verifying its origin or integrity. The malicious module is then executed with the privileges of that process.
Risk Assessment
Arbitrary code execution and full compromise of the Mitel Linux virtual machine are possible. The vulnerability can be exploited by an attacker able to place a file in the relevant location.
Recommendation
Update the software to a version that verifies the origin and integrity of loaded modules. Restrict write permissions to directories from which .so modules are loaded and monitor for unusual files.
Other vulnerabilities in DigitalCanion
See all- CVE-2026-104806Medium
Path traversal vulnerability in DigitalCanion's management portal, in the Maintenance → System Logs functionality. Allows access to files outside the intended directory, including sensitive system files.
- CVE-2026-104805High
A vulnerability in the backup restoration functionality allows an attacker with access to the configured backup repository to introduce arbitrary files during restoration. The mechanism fails to properly validate paths, file types, integrity, and authenticity of files within a restored TGZ archive.
- CVE-2026-104706High
A path traversal vulnerability was discovered in DigitalCanion's product that allows viewing or downloading sensitive system files over the portal https://<ip>:8443 via the Administration -> View Logs menu.
Original NVD description (English source)
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A malicious shared object using the expected name can therefore be loaded by a privileged process. The module code then executes within the context and privileges of that process. This results in arbitrary code execution and full compromise of the Mitel Linux virtual machine.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS