Authentication & Access Control The Common Name Was a Command: Unauthenticated Root on Mitel MiCollab
Mitel advisory MISA-2026-0005 • MTLVULN-1667 • CVSS 10.0 • Patched 2026-06-17 • Hunting SSRF on a Mitel MiCollab appliance, I noticed it was complaining about my TLS certificate. That complaint turned out to be unauthenticated root, and the command ran even though the appliance decided my certificate was invalid and refused it.
