THREAT OPS › CVEs › CVE-2026-45247
CVE-2026-45247 — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.
Vulnerability details
- Affected productsMirasvit Full Page Cache Warmer
- KEV remediation due2026-06-06