Mirasvit

Records3All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mirasvit records in CISA KEV

TI-2026-33054 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability CRITICAL 99KEV 2026-06-03

Components

Products in the NVD configurations · select one to filter the records

Helpdesk Mx 2 records LOW Full Page Cache Warmer 1 record CRITICAL

Records

1 record in Full Page Cache Warmer · all components

TI-2026-33054 CVE-2026-45247 · GHSA-rg8p-9rpg-r32p

Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection

CRITICAL 99KEV

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.26157 Published 2026-05-26 Fixed in 1.11.12 CWE-502

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0