Read the docs

Mirasvit

Records3All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mirasvit records in CISA KEV
TI-2026-33054 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Priority CRITICAL 99KEV 2026-06-03

Components

Products in the NVD configurations · select one to filter the records
Helpdesk Mx 2 records LOW Full Page Cache Warmer 1 record CRITICAL

Records

3 records

TI-2026-33054 CVE-2026-45247 · GHSA-rg8p-9rpg-r32p

Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection

Priority CRITICAL 99KEV

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.26157 Published 2026-05-26 Fixed in 1.11.12 CWE-502
TI-2017-10441 CVE-2017-14321 · GHSA-66xf-hmj3-jj6x

Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in…

Priority LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subj…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00603 Published 2017-09-21 No fix listed CWE-79
Open these records in search →