Skip to content

CVE-2026-78224

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
September 10, 2026
Last Seen
September 10, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

NextGen Mirth Connect Vulnerabilities Expose Healthcare Systems60.6

NextGen Healthcare's Mirth Connect integration engine has critical vulnerabilities that allow attackers to exfiltrate sensitive data and potentially disrupt services. The flaws include an authenticated SQL injection (CVE-2026-82583) and two XML parser vulnerabilities (CVE-2026-78224, CVE-2026-82578)...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Sql InjectionData BreachDenial-of-ServiceNextGen HealthcareUnited StatesCwe-611 - Improper Restriction Of XML External Entity Reference (xxe)Cwe-89 - SQL InjectionCWE-200 - Exposure of Sensitive InformationCWE-287 - Improper AuthenticationCwe-502 - Deserialization Of Untrusted DataHealthcarePublic Health