CVE

CVE-2022-29499

1field note · 0digests

View all posts tagged #cve-2022-29499 →

Field notes

Analysis · May 8, 2026 · The Field Notes Desk
Mitel MiCollab keeps shipping the same path-traversal bug class
watchTowr published a working unauth file-read chain on December 5, 2024 with one of the two CVEs still a 0-day. The pattern across NPM, ReconcileWizard, and AWV is structural, and operators tolerate it because UC is the most upgrade-averse tier in the enterprise.