Is CVE-2026-82583 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82583 being exploited in the wild.

How severe is CVE-2026-82583?

High severity, with a CVSS score of 8.3, published 11 September 2026.

Which products and versions are affected?

NextGen Connect 4.7.1 and earlier.

Is there a fix for CVE-2026-82583?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-82583 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-82583?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82583: NextGen Connect SQL injection in Database Connector API

CVE-2026-82583 · Severity: high · CVSS 8.3 · Published 2026-09-11

NextGen Connect (Mirth Connect) is an open-source healthcare integration platform used to exchange data between medical systems and devices. An authenticated user can inject arbitrary SQL commands through the Database Connector API, potentially exposing stored credentials for connected systems, writing files to the server, or causing service outages that disrupt critical healthcare data flow.

Quick answers

Is CVE-2026-82583 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82583 being exploited in the wild.
How severe is CVE-2026-82583?: High severity, with a CVSS score of 8.3, published 11 September 2026.
Which products and versions are affected?: NextGen Connect 4.7.1 and earlier.
Is there a fix for CVE-2026-82583?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-82583 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-82583?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a SQL injection vulnerability in the Database Connector API of NextGen Connect versions 4.7.1 and earlier. The vulnerability requires authentication but allows an authenticated attacker to execute arbitrary SQL queries without proper input validation or parameterized query protection. Successful exploitation enables credential disclosure from the application's credential store, arbitrary file write operations on the server filesystem (potentially leading to code execution), and denial-of-service attacks through resource-intensive queries. A patch is expected from NextGen Connect for versions after 4.7.1.

Affected products

NextGen Connect 4.7.1 and earlier

Timeline

2026-09-11: disclosed
2026-09-11: advisory: CISA ICSMA-26-253-01

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.