CVE-2023-37679

PoC —1

CVSS 3.1

9.8 critical

EPSS

99%p100

Published

Aug 3, 2023 (Aug 3, 2023)

Modified

Jul 9, 2026

Description

A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.

Vendors: nextgen
Products: mirth connect
Weakness: CWE-77
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (99.4%)

In the news3 stories

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N

The Hacker NewsAug 10, 16:38 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-18577 CVE-2026-18556 CVE-2023-37679+7 CVEs

60

NextGen Healthcare Mirth Connect Under Attack

The Hacker NewsMay 21, 16:00 UTC · May 21, 2024Exploit / PoC in the wildCVE-2023-43208 CVE-2023-37679 CVE-2024-1709+5 CVEs

60

Critical Flaw in NextGen's Mirth Connect Could Expose Healthcare Data

The Hacker NewsOct 27, 03:29 UTC · Oct 27, 2023Vulnerability CVE-2023-43208 CVE-2023-37679

60