CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

1 advisories matched

CVE-2026-452479.8/CRITICALEPSS 94.0%CISA KEV

2026-05-26

Mirasvit Full Page Cache Warmer for Magento 2 PHP Object Injection RCE Vulnerability (CVE-2026-45247)

[Affected Scope] Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12

[Impact] Unauthenticated remote attackers can achieve arbitrary code execution (RCE) on the target server

[Mitigation] Immediately upgrade the Mirasvit Full Page Cache Warmer module to version 1.11.12 or higher, and deploy WAF mitigation rules