NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC3

CVE-2023-37679

CVSS 3.1: 9.8 critical
EPSS: 99%p100
Published: Aug 3, 2023 · Aug 3, 2023
Modified: Jul 9, 2026

Analyze CVE-2023-37679 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.

Vendors: nextgen

Products: mirth connect

Weakness: CWE-77

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (99.4%)

In the news

3 stories

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N

The Hacker NewsAug 10, 16:38 UTC · Aug 10, 2026RansomwareExploitedCVE-2026-18577 CVE-2026-18556 CVE-2023-37679+73 · 2 reads

60

NextGen Healthcare Mirth Connect Under Attack

The Hacker NewsMay 21, 16:00 UTC · May 21, 2024Exploit / PoCExploitedCVE-2023-43208 CVE-2023-37679 CVE-2024-1709+52 · 1 read

60

Critical Flaw in NextGen's Mirth Connect Could Expose Healthcare Data

The Hacker NewsOct 27, 03:29 UTC · Oct 27, 2023VulnerabilityCVE-2023-43208 CVE-2023-376791

60