CISA has added CVE-2026-45247, a critical remote code execution vulnerability in Mirasvit Cache Warmer for Magento, to its Known Exploited Vulnerabilities catalog. The flaw, which has a CVSS score of 9.8, involves deserialization of untrusted data and is being actively exploited in the wild, posing significant risk to e-commerce platforms using this popular full-page cache extension.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-45247 (CVSS score: 9.8), is a case of deserialization of untrusted
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
