CVE-2026-45247 CRITICAL

Mirasvit Mirasvit Full Page Cache Warmer Vulnerability
Generated: 10 Oct 2026 20:39 • CVE Threat Intelligence

Description

Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.

9.8
CVSS CRITICAL

Details

Published
03 Jun 2026 00:00
Modified
N/A
Source
CIRCL
Vendor
Mirasvit
Product
Mirasvit Full Page Cache Warmer
Fix Version
Vendor Patch / Mitigation Available