NextGen Healthcare Mirth Connect

3 known vulnerabilities in NextGen Healthcare Mirth Connect, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-82583 CVSS 7.2 high NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database…
CVE-2026-82578 CVSS 8.7 high When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with…
CVE-2026-78224 CVSS 8.8 high The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data…