Mirasvit Full Page Cache Warmer Vulnerability Added to KEV with Three-Day Mitigation Window
NEOSEC enrichment — no mirror of the original source
A critical remote code execution vulnerability in the Mirasvit Full Page Cache Warmer for Magento 2 extension is being actively exploited. CVE-2026-45247, CVSS 9.8, is described as a PHP object injection vulnerability that allows unauthenti
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-45247Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to a…
- CVE-2026-45247Mirasvit Mirasvit Full Page Cache Warmer — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
More on Mitigation
Other advisories
- HighCVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- HighCVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- Not ratedosv:CVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- CriticalCVE-2026-39797Data443 Risk Mitigation GDPR Framework By Data443: Deserialisierung nicht vertrauenswürdiger Daten
- CriticalCVE-2026-39797Data443 Risk Mitigation GDPR Framework By Data443: Deserialisierung nicht vertrauenswürdiger Daten
- Not ratedosv:CLEANSTART-2026-RX54054As mitigation for CVE-2020-1945 Apache Ant 1
- Not ratedosv:CLEANSTART-2025-TN67221As mitigation for CVE-2020-1945 Apache Ant 1
- HighCVE-2026-86043Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix GHSA-8qqm-fp2q-v734) in github.com/zalando/skipper
Other news entries
- PHP shares mitigation for new RCE vulnerability with no patchNewsBleepingComputer
- Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570NewsMicrosoft Threat Intelligence
- ConnectWise warns of new ScreenConnect flaw without patchNewsBleepingComputer
- PaperCut Releases Emergency Patch for Exploited Zero-DayNewsSecurityWeek
- CISA Adds 10 CVEs to Known Exploited Vulnerabilities Catalog, Five with Three-day Mitigation DeadlinesVulnerabilitySANS NewsBites
- New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root AccessNewsThe Hacker News
- KEV: Oracle, Zimbra, TrueConfVulnerabilitySANS NewsBites
- Critical GitLab Zero-Click Flaw Poses Mitigation ChallengesNewsDark Reading
Source: https://thehackernews.com/
ID