https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T11:34:30.882004+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-45247 CVE-2026-45247 — Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection 2026-09-29T11:34:30.884405+00:00

Affected: Mirasvit Full Page Cache Warmer for Magento 2

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.