CVE-2025-27827 Information disclosure in n/a
Unauthenticated attackers can access sensitive chat data and send messages in active sessions via improper session handling in Mitel MiContact Center Business.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-27827?
CVE-2025-27827 is a high-severity vulnerability in n/a, published on 24 Jun 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.2.0.3 could allow an unauthenticated attacker to conduct an information disclosure attack due to improper handling of session data. A successful exploit requires user interaction and could allow an attacker to access sensitive information, leading to unauthorized access to active chat rooms, reading chat data, and sending messages during an active chat session.
Weakness: CWE-200
Which versions are affected by CVE-2025-27827?
How do I fix CVE-2025-27827?
No fix has been published for CVE-2025-27827 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-27827 being exploited?
There is no known exploitation of CVE-2025-27827 in the wild and no public exploit code.
Sources
Also known as GHSA-j9r8-h6rf-pcr2.