High severity8.3NVD Advisory· Published Sep 11, 2026· Updated Sep 18, 2026
CVE-2026-82583
CVE-2026-82583
Description
NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=4.7.1
Patches
Vulnerability mechanics
References
2News mentions
3- 24 Vulnerabilities Disclosed Across Multiple Products: Authentication, Injection, and Credential Flaws ExposedVypr Intelligence · Sep 11, 2026
- NextGen Mirth Connect Flaws Expose Downstream System LoginsGovInfoSecurity · Sep 10, 2026
- NextGen Healthcare Mirth ConnectCISA Alerts