Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/09/21 3:40 p.m.•6 views

PoC-Funcional---CVE-2026-45247-Mirasvit-Full-Page-Cache-Warmer-RCE-

CVE-2026-45247 - Mirasvit Full Page Cache Warmer for Magento 2 - PHPオブジェクトインジェクション → RCE -red 📋 説明 CVE-2026-45247 は、Magento 2 および Adobe Commerce 向けの Mirasvit Full Page Cache Warmer 拡張機能における重大な PHPオブジェクトインジェクション PHP Object Injection の脆弱性です。認証されていない攻撃者が、操作されたシリアル化された PHP オブジェクトを CacheWarmer...

9.8CVSS8.6AI score0.02085EPSS
SaveExploits1
EUVD
EUVD
•added 2026/05/26 2:15 p.m.•32 views

EUVD-2026-31837

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted...

9.8CVSS6.7AI score0.02085EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/05/26 2:15 p.m.•14 views

CVE-2026-45247 Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted...

9.8CVSS6.7AI score0.02085EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•0 views

CVE-2026-45247: Deserialization of Untrusted Data

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted...

9.8CVSS6.8AI score0.02085EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•39 views

PT-2026-43258

Name of the Vulnerable Software and Affected Versions Mirasvit Full Page Cache Warmer for Magento 2 versions prior to 1.11.12 Description A PHP object injection issue exists due to the unrestricted use of the native unserialize function. Unauthenticated attackers can achieve remote code execution...

9.8CVSS6.6AI score0.02085EPSS
SaveExploits1References72
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•28 views

Mirasvit Full Page Cache Warmer for Magento 2 代码问题漏洞

Mirasvit Full Page Cache Warmer for Magento 2 is a caching preheating extension developed by the American company Mirasvit for Magento 2. Versions prior to 1.11.12 of Mirasvit Full Page Cache Warmer for Magento 2 contained a code vulnerability. This vulnerability stemmed from the lack of...

9.8CVSS6.2AI score0.02085EPSS
SaveExploits1References3
Rows per page
Query Builder