grep -l "XStream Deserialization" ./machines [1] sorted: date ▼

namediffosdatetags

Interpreter medium linux 2026-02-21 Pre-auth RCE via CVE-2023-43208 XStream deserialization in Mirth Connect 4.4.0, lateral movement through MySQL credential extraction and password hash replacement, privilege escalation via Python eval() injection in an internal Flask notification app running as root. xstream deserialization·mirth connect·cve-2023-43208·hl7/mllp·python eval() injection

no machines match that filter