Mirasvit Mirasvit Full Page Cache Warmer Vulnerability
Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.
CVSS Score
9.8
CRITICAL
Published
03 Jun 2026 00:00
Modified
N/A
Vendor
Mirasvit
Product
Mirasvit Full Page Cache Warmer
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-502
Affected Systems
Mirasvit
Mirasvit Full Page Cache Warmer
Mirasvit
Mirasvit Full Page Cache Warmer
External Links
KEV Status
Known Exploited Vulnerability