CVE-2024-35286: Mitel MiCollab NuPoint Messenger is vulnerable to SQL Injection, potentially allowing unauthorized database access. CVE-2024-35286 affects Mitel MiCollab through version 9.8.0.33. An unauthenticated attacker can exploit this vulnerability by injecting malicious SQL commands due to insufficient input sanitization. Although the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) is 40, indicating a moderate risk. Successful exploitation could lead to the disclosure of sensitive information and the execution of arbitrary database operations. Organizations using affected versions of Mitel MiCollab should promptly apply necessary patches or mitigations. This vulnerability poses a significant data breach risk and could compromise the integrity of the entire system. Immediate action is recommended to minimize potential damage from threat actors attempting to exploit this flaw.