CVE-2023-37679: Critical RCE in Mirth Connect 4.3.0

CVE-2023-37679 is a remote code execution (RCE) vulnerability affecting NextGen Mirth Connect version 4.3.0. A remote attacker can send malicious requests and execute arbitrary commands on the server hosting the application. This impacts the confidentiality, integrity, and availability of data and services managed by Mirth Connect, often used for healthcare and enterprise message integration and routing.

The CVSS score recorded is 9.8, critical classification per NVD data. The vulnerability was published on August 3, 2023. A significant signal emerges on October 30, 2026: public repositories on GitHub have correlated this CVE. This signal indicates that vulnerability-related code has reached public visibility, increasing the risk of organized attacks on unpatched systems.

For defenders: first, verify if the server exposes NextGen Mirth Connect 4.3.0 on the network and determine the communication perimeter. Contact NextGen Healthcare vendor for patches or corrected versions. If an official fix is unavailable or patching is not immediate, implement restricted network access controls, limit clients that can contact the service, and monitor access logs for anomalous activity. Consider temporary service isolation if operational risk permits.