Skip to content
Threat Feed

Vendor

Mirasvit

1 brief RSS
critical advisory

Mirasvit Full Page Cache Warmer for Magento 2 PHP Object Injection RCE (CVE-2026-45247)

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability (CVE-2026-45247) that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.

Full Page Cache Warmer for Magento 2 +1 php-object-injection rce magento web-application cve-2026-45247
2r 2t 1c