CVE-2026-45247

CVE

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

June 4, 2026

Last Seen

June 5, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical PHP Object Injection Vulnerability in Mirasvit Cache Warmer72.9

A critical vulnerability, CVE-2026-45247, has been identified in the Mirasvit Full Page Cache Warmer for Magento 2, allowing unauthenticated remote code execution via a crafted CacheWarmer cookie. The flaw, rated 9.8 on the CVSS scale, affects versions prior to 1.11.12 and is due to unsafe deseriali...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical PHP Object Injection Vulnerability in Mirasvit Cache Warmer

Jun 4·4 sources

Related Articles (5)

Critical Vulnerability in Mirasvit Full Page Cache Warmer for Magento 2

Dark Web Surveillance: Mirasvit CVE-2026-45247 Alert

Darknetsearch·Jun 5

CVE-2026-45247

nvd.nist.gov·Jun 4

Mirasvit Cache Warmer Object Injection

sansec.io·Jun 4

9.8 Mirasvit bug actively exploited on Magento servers | news

Related Entities

Zero-day Exploit Data Breach Ransomware Remote Code Execution Cloudflare United States CWE-502 - Deserialization Of Untrusted Data T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution Magento Magento 2 Adobe Commerce