high
advisory
Nextgen Mirth Connect: Remote code execution via XStream deserialization (CVE-2023-43208)
A public proof-of-concept exploit is available for a remote code execution vulnerability in Mirth Connect (versions prior to 4.4.1) involving XStream deserialization via the API.
CVE search metadata
CVE search record: CVE-2023-43208. Severity: critical. CVSS: 9.8. EPSS: 85.42%. KEV: no. Product: Mirth Connect (< 4.4.1). Brief: Nextgen Mirth Connect: Remote code execution via XStream deserialization (CVE-2023-43208). Brief link: https://feed.craftedsignal.io/briefs/2026-10-mirth-connect-rce/
Triage facts
Revision 1- Applicability
- Mirth Connect (< 4.4.1)
- Evidence
- Unknown
- Severity
- High
- Sources
- 2 public sources
- Freshness
- Revision 1Oct 30, 02:28 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance