CVE-2023-37679

CriticalCVSS 9.8

Published: 03/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

96.13%

100th percentile - higher than 100% of all known CVEs

A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.

An attacker can take control of the server, leading to compromise of data confidentiality, integrity, and system availability.

It is recommended to immediately update NextGen Mirth Connect to the latest available version that fixes this vulnerability.

Original NVD description (English source)

A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.