CyberSecBulletin

Mirasvit vulnerabilities

We track 1 vulnerability in Mirasvit products across 2 products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on May 26, 2026.

1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score

Latest Mirasvit vulnerabilities

  • 9.8 Critical severity

    Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Exploited

    CVE-2026-45247MirasvitEPSS 26.2%

    Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. At