← Back to Feed

NextGen Healthcare Mirth Connect

CVE-2026-82583CVE-2026-78224CVE-2026-82578

September 10, 2026 · CISA (US-CERT) · Severity: CRITICAL

NextGen Healthcare Mirth Connect versions up to v4.7.1 are affected by multiple vulnerabilities including SQL injection and improper neutralization of special elements. Successful exploitation could allow an attacker to exfiltrate data or cause a denial-of-service condition. The vulnerabilities are tracked as CVE-2026-82583, CVE-2026-78224, and CVE-2026-82578 with a CVSS v3 base score of 8.3. Healthcare organizations using Mirth Connect should apply security updates promptly.

Key Takeaways

  • NextGen Healthcare Mirth Connect versions up to v4.7.1 contain SQL injection and input neutralization vulnerabilities rated CVSS 8.3.
  • Successful exploitation could allow attackers to exfiltrate sensitive healthcare data or disrupt operations through denial-of-service conditions.
  • Healthcare organizations using Mirth Connect for health data interoperability should prioritize patching these vulnerabilities to protect patient information.
☕ Buy a Coffee