CVE-2026-104809 Medium Severity Vulnerability Details & Analysis

Summary

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A malicious shared object using the expected name can therefore be loaded by a privileged process. The module code then executes within the context and privileges of that process. This results in arbitrary cod

Description

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A malicious shared object using the expected name can therefore be loaded by a privileged process. The module code then executes within the context and privileges of that process. This results in arbitrary code execution and full compromise of the Mitel Linux virtual machine.

🎯 CISA SSVC Assessment Updated: Oct 5, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

NO

Requires human interaction

💥 Technical Impact

Total

Complete system compromise possible

🏆 Discovered By

Brian Mariani from DigitalCanion SA

SSVC data provided by CISA

CVE-2026-104809

Summary

Description

🎯 CISA SSVC Assessment Updated: Oct 5, 2026

📦 Affected Products 0

🔗 References 1