CVE-2023-37679
Critical · CVSS 9.8NextGen Mirth Connect — Remote Command Execution (RCE) via Command Injection (CWE-77)
- CVSS
- 9.8
- nvd
- EPSS
- 97.1%
- 100th pct
- KEV
- No
- Class
- oss containerizable
- CWE-77
Description
A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.
Search profile — drives PoC discovery
Symbols MirthConnectMirth Connectv4.3.0v4.4.0RCEcommand injectionremote code executionnextgenmirth
Keywords CVE-2023-37679Mirth Connect RCENextGen Mirth Connect remote command executionMirth Connect 4.3.0 exploitMirth Connect 4.4.0 exploitMirth Connect command injectionihteam mirth advisorypacketstorm mirth connectMirth Connect PoC
Versions: <= 4.4.0 (confirmed vulnerable at 4.3.0)
Ranked PoCs (3) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0J4F9S5D2Q7/CVE-2023-43208-MIRTHCONNECT needs reviewtrickest
- ★ 0K3ysTr0K3R/CVE-2023-43208-EXPLOIT needs reviewtrickest
- ★ 0jakabakos/CVE-2023-43208-mirth-connect-rce-poc needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
- http://packetstormsecurity.com/files/176920/Mirth-Connect-4.4.0-Remote-Command-Execution.html
- https://www.ihteam.net/advisory/mirth-connect
- http://mirth.com
- http://nextgen.com
- http://packetstormsecurity.com/files/176920/Mirth-Connect-4.4.0-Remote-Command-Execution.html
- https://www.ihteam.net/advisory/mirth-connect
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z